Set the smack label of /dev/mapper and /dev/mapper/control as '*' 62/189662/8 accepted/tizen_5.0_unified accepted/tizen_5.5_unified accepted/tizen_5.5_unified_mobile_hotfix accepted/tizen_5.5_unified_wearable_hotfix accepted/tizen_6.0_unified_hotfix accepted/tizen_6.5_unified accepted/tizen_7.0_unified accepted/tizen_7.0_unified_hotfix tizen_5.0 tizen_5.5 tizen_5.5_mobile_hotfix tizen_5.5_tv tizen_5.5_wearable_hotfix tizen_6.0 tizen_6.0_hotfix tizen_6.5 tizen_7.0 tizen_7.0_hotfix accepted/tizen/5.0/unified/20181102.025336 accepted/tizen/5.5/unified/20191031.010142 accepted/tizen/5.5/unified/mobile/hotfix/20201027.063321 accepted/tizen/5.5/unified/wearable/hotfix/20201027.103137 accepted/tizen/6.0/unified/hotfix/20201103.000531 accepted/tizen/6.5/unified/20211028.224215 accepted/tizen/7.0/unified/20221110.063703 accepted/tizen/7.0/unified/hotfix/20221116.110710 accepted/tizen/unified/20181001.150941 submit/tizen/20181001.084812 submit/tizen_5.0/20181101.000006 submit/tizen_5.5/20191031.000006 submit/tizen_5.5_mobile_hotfix/20201026.185106 submit/tizen_5.5_wearable_hotfix/20201026.184306 submit/tizen_6.0/20201029.205501 submit/tizen_6.0_hotfix/20201102.192901 submit/tizen_6.0_hotfix/20201103.115101 submit/tizen_6.5/20211028.163301 tizen_5.5.m2_release tizen_6.0.m2_release tizen_6.5.m2_release tizen_7.0_m2_release
authorHyotaek Shim <hyotaek.shim@samsung.com>
Wed, 19 Sep 2018 10:23:03 +0000 (19:23 +0900)
committerHyotaek Shim <hyotaek.shim@samsung.com>
Mon, 1 Oct 2018 05:55:12 +0000 (14:55 +0900)
Normally, /dev/mapper and /dev/mapper/control are created by the in-kernel dm driver
and the smack label is set by Systemd as '*'.
When the dm driver is loaded as a module (dm-mod.ko), however,
/dev/mapper's label cannot be initialized by Systemd.

drwxr-xr-x root root * /dev/mapper
crw------- root root * /dev/mapper/control

Change-Id: I74f7b58cbfb80294bb19bd5cff683359d26c1b22
Signed-off-by: Hyotaek Shim <hyotaek.shim@samsung.com>
udev/10-dm.rules.in

index 29af467..943afa6 100644 (file)
@@ -14,8 +14,7 @@
 #   DM_SUSPENDED - suspended state of DM device (0 or 1)
 #   DM_UDEV_RULES_VSN - DM udev rules version
 
-KERNEL=="device-mapper", NAME="(DM_DIR)/control"
-
+KERNEL=="device-mapper", NAME="(DM_DIR)/control", SECLABEL{smack}="*", RUN+="/bin/chsmack -a * /dev/mapper"
 SUBSYSTEM!="block", GOTO="dm_end"
 KERNEL!="dm-[0-9]*", GOTO="dm_end"
 (DM_EXEC_RULE)