From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752508AbdJFRxM convert rfc822-to-8bit (ORCPT ); Fri, 6 Oct 2017 13:53:12 -0400 Received: from mx1.redhat.com ([209.132.183.28]:37392 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751862AbdJFRxL (ORCPT ); Fri, 6 Oct 2017 13:53:11 -0400 DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com 37BE6C0587F5 Authentication-Results: ext-mx08.extmail.prod.ext.phx2.redhat.com; dmarc=none (p=none dis=none) header.from=redhat.com Authentication-Results: ext-mx08.extmail.prod.ext.phx2.redhat.com; spf=fail smtp.mailfrom=longman@redhat.com To: Antonio Murdaca Cc: Paul Moore , Stephen Smalley , selinux@tycho.nsa.gov, Tejun Heo , lkml From: Waiman Long Subject: About commit 901ef845fa2469c ("selinux: allow per-file labeling for cgroupfs") Organization: Red Hat Message-ID: <8009753d-c022-12ec-406d-7d6cf01f5f73@redhat.com> Date: Fri, 6 Oct 2017 13:53:07 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8BIT Content-Language: en-US X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.32]); Fri, 06 Oct 2017 17:53:11 +0000 (UTC) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Antonio, I have a question about your 4.14 upstream commit 901ef845fa2469c ("selinux: allow per-file labeling for cgroupfs"). With that, I am no longer able to mount the cgroup2 filesystem with a 4.14 kernel. The problem is that your commit sets the SE_SBGENFS flag, which causes selinux to lookup the genfs database for a filesystem type match. However, the filesystem type "cgroup2" isn't in the genfs database in my RHEL7 based test system. The "cgroup" filesystem type is in the genfs database, so I have no problem with v1 cgroup mount. Do you know where the genfs database is defined? I need some way to add cgroup2 as a valid genfs fstype, or I have to manually back out the commit in order to do my cgroup2 testing. Thanks, Longman