From e52bc8f4d63d9b0e66406ea4eda6cabccc033909 Mon Sep 17 00:00:00 2001 From: Hyotaek Shim Date: Wed, 8 May 2019 20:55:31 +0900 Subject: [PATCH] Change the default smack label of /dev (Before) smack access label: * default access label: _ (After) smack access label: * default access label: * Change-Id: Iffd4793655a8080501388d40a2f812269b8613cb Signed-off-by: Hyotaek Shim --- src/core/mount-setup.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/mount-setup.c b/src/core/mount-setup.c index b3d43d2..1c86ea7 100644 --- a/src/core/mount-setup.c +++ b/src/core/mount-setup.c @@ -75,7 +75,7 @@ static const MountPoint mount_table[] = { NULL, MNT_FATAL|MNT_IN_CONTAINER }, { "proc", "/proc", "proc", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV, NULL, MNT_FATAL|MNT_IN_CONTAINER }, - { "devtmpfs", "/dev", "devtmpfs", "mode=755", MS_NOSUID|MS_STRICTATIME, + { "devtmpfs", "/dev", "devtmpfs", "mode=755,smackfsdef=*", MS_NOSUID|MS_STRICTATIME, NULL, MNT_FATAL|MNT_IN_CONTAINER }, { "securityfs", "/sys/kernel/security", "securityfs", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV, NULL, MNT_NONE }, -- 2.7.4