{"push_id":836060004,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"2abdc390a309878933ef463b10b6e4336ea3caa5","before":"129ddf00944ff6d90323626e3c59b9d8c3366000","commits":[{"sha":"2abdc390a309878933ef463b10b6e4336ea3caa5","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"selinux: enable genfscon labeling for sysfs and pstore files\n\nSupport per-file labeling of sysfs and pstore files based on\ngenfscon policy entries.  This is safe because the sysfs\nand pstore directory tree cannot be manipulated by userspace,\nexcept to unlink pstore entries.\nThis provides an alternative method of assigning per-file labeling\nto sysfs or pstore files without needing to set the labels from\nuserspace on each boot.  The advantages of this approach are that\nthe labels are assigned as soon as the dentry is first instantiated\nand userspace does not need to walk the sysfs or pstore tree and\nset the labels on each boot.  The limitations of this approach are\nthat the labels can only be assigned based on pathname prefix matching.\nYou can initially assign labels using this mechanism and then change\nthem at runtime via setxattr if allowed to do so by policy.\n\nChange-Id: If5999785fdc1d24d869b23ae35cd302311e94562\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>\nSuggested-by: Dominick Grift <dac.override@gmail.com>","distinct":true,"url":"https://api.github.com/repos/dwander/rework/commits/2abdc390a309878933ef463b10b6e4336ea3caa5"}]}