Commit 2088d60e authored Feb 04, 2015 by Paul Moore

selinux: quiet the filesystem labeling behavior message



While the filesystem labeling method is only printed at the KERN_DEBUG
level, this still appears in dmesg and on modern Linux distributions
that create a lot of tmpfs mounts for session handling, the dmesg can
easily be filled with a lot of "SELinux: initialized (dev X ..."
messages.  This patch removes this notification for the normal case
but leaves the error message intact (displayed when mounting a
filesystem with an unknown labeling behavior).

Reported-by: Dave Jones <davej@codemonkey.org.uk>
Signed-off-by: Paul Moore <pmoore@redhat.com>

parent e230f12c

security/selinux/hooks.c

+0 −4

Original line number	Diff line number	Diff line
		@@ -456,10 +456,6 @@ static int sb_finish_set_opts(struct super_block *sb)
		if (sbsec->behavior > ARRAY_SIZE(labeling_behaviors))
		printk(KERN_ERR "SELinux: initialized (dev %s, type %s), unknown behavior\n",
		sb->s_id, sb->s_type->name);
		else
		printk(KERN_DEBUG "SELinux: initialized (dev %s, type %s), %s\n",
		sb->s_id, sb->s_type->name,
		labeling_behaviors[sbsec->behavior-1]);

		sbsec->flags \|= SE_SBINITIALIZED;
		if (selinux_is_sblabel_mnt(sb))

Admin message