commit 5101a1850bb7ccbf107929dee9af0cd2f400940f
author Mimi Zohar <zohar@linux.vnet.ibm.com> Tue Apr 21 13:59:31 2015 -0400
committer Mimi Zohar <zohar@linux.vnet.ibm.com> Thu May 21 13:28:47 2015 -0400
tree 5ef7ac633c626864273b091ffe6b180e5b92297f
parent a18d0cbfabd1d17e11ec2ae54804284298462125

evm: labeling pseudo filesystems exception

To prevent offline stripping of existing file xattrs and relabeling of
them at runtime, EVM allows only newly created files to be labeled.  As
pseudo filesystems are not persistent, stripping of xattrs is not a
concern.

Some LSMs defer file labeling on pseudo filesystems.  This patch
permits the labeling of existing files on pseudo files systems.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>