[LU-13742] Provide an selinux_is_enabled for newer kernels - Whamcloud Community JIRA

Details

Type: Bug
Resolution: Fixed
Priority: Major
Fix Version/s: Lustre 2.14.0, Lustre 2.12.6
Affects Version/s: Lustre 2.14.0, Lustre 2.12.5
Labels:
None
Environment:
RHEL/CentOS 8, Linux 5.1

Severity:
3
Rank (Obsolete):
9223372036854775807

Description

Some special handling for selinux xattrs was broken when selinux_is_enabled was removed and CONFIG_SECURITY_SELINUX is enabled.

Provide a replacement for selinux_is_enabled.

Attachments

Issue Links

is related to

LU-6784 Defects in SELinux support

Resolved

Activity

[LU-13742] Provide an selinux_is_enabled for newer kernels

Gerrit Updater added a comment - 01/Sep/20 3:47 AM

Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39671/
Subject: ~~LU-13742~~ llite: do not bypass selinux xattr handling
Project: fs/lustre-release
Branch: b2_12
Current Patch Set:
Commit: d657c96e35e8b05df111745d6e540aaf16a0c1c9

Gerrit Updater added a comment - 01/Sep/20 3:47 AM Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39671/ Subject: LU-13742 llite: do not bypass selinux xattr handling Project: fs/lustre-release Branch: b2_12 Current Patch Set: Commit: d657c96e35e8b05df111745d6e540aaf16a0c1c9

Gerrit Updater added a comment - 13/Aug/20 5:19 PM

Minh Diep (mdiep@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/39671
Subject: ~~LU-13742~~ llite: do not bypass selinux xattr handling
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: d67984456024cb83022244236518366a251d2d37

Gerrit Updater added a comment - 13/Aug/20 5:19 PM Minh Diep (mdiep@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/39671 Subject: LU-13742 llite: do not bypass selinux xattr handling Project: fs/lustre-release Branch: b2_12 Current Patch Set: 1 Commit: d67984456024cb83022244236518366a251d2d37

Peter Jones added a comment - 13/Aug/20 1:19 PM

Landed for 2.14

Peter Jones added a comment - 13/Aug/20 1:19 PM Landed for 2.14

Gerrit Updater added a comment - 13/Aug/20 6:01 AM

Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39569/
Subject: ~~LU-13742~~ llite: do not bypass selinux xattr handling
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 994287bd47819ebd8badb716da4232cdff97d324

Gerrit Updater added a comment - 13/Aug/20 6:01 AM Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39569/ Subject: LU-13742 llite: do not bypass selinux xattr handling Project: fs/lustre-release Branch: master Current Patch Set: Commit: 994287bd47819ebd8badb716da4232cdff97d324

Gerrit Updater added a comment - 04/Aug/20 9:53 PM

Shaun Tancheff (shaun.tancheff@hpe.com) uploaded a new patch: https://review.whamcloud.com/39569
Subject: ~~LU-13742~~ llite: conditionally ignore selinux negative caching
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 718e501e83539376f57283af220c7344f65b7710

Gerrit Updater added a comment - 04/Aug/20 9:53 PM Shaun Tancheff (shaun.tancheff@hpe.com) uploaded a new patch: https://review.whamcloud.com/39569 Subject: LU-13742 llite: conditionally ignore selinux negative caching Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 718e501e83539376f57283af220c7344f65b7710

Sebastien Buisson added a comment - 09/Jul/20 7:05 AM

Raising priority as this impacts CentOS/RHEL 8.

Sebastien Buisson added a comment - 09/Jul/20 7:05 AM Raising priority as this impacts CentOS/RHEL 8.

Gerrit Updater added a comment - 02/Jul/20 6:18 AM

Shaun Tancheff (shaun.tancheff@hpe.com) uploaded a new patch: https://review.whamcloud.com/39244
Subject: ~~LU-13742~~ llite: provide an selinux_is_enabled replacement
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 630cfd4f335b5aefef6e710ef3e8b56480d0c9d7

Gerrit Updater added a comment - 02/Jul/20 6:18 AM Shaun Tancheff (shaun.tancheff@hpe.com) uploaded a new patch: https://review.whamcloud.com/39244 Subject: LU-13742 llite: provide an selinux_is_enabled replacement Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 630cfd4f335b5aefef6e710ef3e8b56480d0c9d7

People

Assignee:: Shaun Tancheff

Reporter:: Shaun Tancheff

Votes:: 0 Vote for this issue

Watchers:: 8 Start watching this issue

Dates

Created:: 02/Jul/20 4:27 AM

Updated:: 14/Dec/21 10:33 PM

Resolved:: 13/Aug/20 1:19 PM