selinux: make labeled NFS work when mounted before policy load (!2865) · Merge requests · Red Hat / centos-stream / src / kernel / centos-stream-9

Juraj Marcin requested to merge JurajMarcin/centos-stream-9:9.3-bz2218207-nfs-label-fix into main Jul 28, 2023

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2218207

Tested: https://beaker.engineering.redhat.com/jobs/8121056

This merge request fixes the issue when NFS filesystem is not labeled correctly when mounted before SELinux loads (for example, root FS in diskless clients).

There is one minor conflict in security/selinux/hooks.c as selinux_initialized() still requires an argument.

Signed-off-by: Juraj Marcin jmarcin@redhat.com

selinux: make labeled NFS work when mounted before policy load

Merge request reports