[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [PATCH 1/1] [bug556972-srivasta]: Explicitly allow /selinux and /sys as FHS exceptions



Hi,

I'm a bit late to the party, but:

On Fri, Nov 20, 2009 at 12:33:50PM -0600, Manoj Srivastava wrote:
> This patch explicitly allows /sys and /selinux as additional
> directories int he root file system allowed under the policy.

We should probably add /spu to that list, which is where spufs is
traditionally mounted on CBEA machines (Cell Broadcast Engine
Architecture) to manage (communication with) the Synergistic Processing
Elements. Without this pseudofilesystem, interaction with the SPEs is
impossible.

-- 
The biometric identification system at the gates of the CIA headquarters
works because there's a guard with a large gun making sure no one is
trying to fool the system.
  http://www.schneier.com/blog/archives/2009/01/biometrics.html


Reply to: