tree 7bf76f04a1fcaa401761a9a734b94682e2ac8b8c
parent 2a7dba391e5628ad665ce84ef9a6648da541ebab
author Eric Paris <eparis@redhat.com> 1296576340 -0500
committer Eric Paris <eparis@redhat.com> 1296576750 -0500

SELinux: Use dentry name in new object labeling

Currently SELinux has rules which label new objects according to 3 criteria.
The label of the process creating the object, the label of the parent
directory, and the type of object (reg, dir, char, block, etc.)  This patch
adds a 4th criteria, the dentry name, thus we can distinguish between
creating a file in an etc_t directory called shadow and one called motd.

There is no file globbing, regex parsing, or anything mystical.  Either the
policy exactly (strcmp) matches the dentry name of the object or it doesn't.
This patch has no changes from today if policy does not implement the new
rules.

Signed-off-by: Eric Paris <eparis@redhat.com>