From mboxrd@z Thu Jan 1 00:00:00 1970 From: dominick.grift@gmail.com (Dominick Grift) Date: Fri, 31 Aug 2012 19:38:21 +0200 Subject: [refpolicy] [PATCH 1/2] Declare a loop control device node type and label /dev/loop-control accordingly In-Reply-To: <1346434702-30274-1-git-send-email-dominick.grift@gmail.com> References: <1346434702-30274-1-git-send-email-dominick.grift@gmail.com> Message-ID: <1346434702-30274-2-git-send-email-dominick.grift@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- policy/modules/kernel/devices.fc | 1 + policy/modules/kernel/devices.te | 3 +++ 2 files changed, 4 insertions(+) diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc index 84e7337..5214c08 100644 --- a/policy/modules/kernel/devices.fc +++ b/policy/modules/kernel/devices.fc @@ -57,6 +57,7 @@ /dev/lirc[0-9]+ -c gen_context(system_u:object_r:lirc_device_t,s0) /dev/lircm -c gen_context(system_u:object_r:mouse_device_t,s0) /dev/logibm -c gen_context(system_u:object_r:mouse_device_t,s0) +/dev/loop-control -c gen_context(system_u:object_r:loop_control_device_t,s0) /dev/lp.* -c gen_context(system_u:object_r:printer_device_t,s0) /dev/mcelog -c gen_context(system_u:object_r:kmsg_device_t,mls_systemhigh) /dev/mei -c gen_context(system_u:object_r:mei_device_t,s0) diff --git a/policy/modules/kernel/devices.te b/policy/modules/kernel/devices.te index 17e0915..99fe460 100644 --- a/policy/modules/kernel/devices.te +++ b/policy/modules/kernel/devices.te @@ -115,6 +115,9 @@ dev_node(kvm_device_t) type lirc_device_t; dev_node(lirc_device_t) +type loop_control_device_t; +dev_node(loop_control_device_t) + # # Type for /dev/mapper/control # -- 1.7.11.4