diff -u -r policy-1.18.2/domains/program/unused/pamconsole.te policy-1.18.2.new/domains/program/unused/pamconsole.te --- policy-1.18.2/domains/program/unused/pamconsole.te 2004-11-05 23:39:10.000000000 -0500 +++ policy-1.18.2.new/domains/program/unused/pamconsole.te 2004-11-08 12:27:01.200075563 -0500 @@ -24,7 +24,7 @@ allow pam_console_t device_t:dir { getattr read }; allow pam_console_t device_t:lnk_file { getattr read }; # mouse_device_t is for joy sticks -allow pam_console_t { framebuf_device_t v4l_device_t apm_bios_t sound_device_t misc_device_t tty_device_t scanner_device_t mouse_device_t removable_device_t scsi_generic_device_t }:chr_file { getattr setattr }; +allow pam_console_t { framebuf_device_t v4l_device_t apm_bios_t sound_device_t misc_device_t tty_device_t scanner_device_t mouse_device_t power_device_t removable_device_t scsi_generic_device_t }:chr_file { getattr setattr }; allow pam_console_t { removable_device_t fixed_disk_device_t }:blk_file { getattr setattr }; allow pam_console_t mnt_t:dir r_dir_perms; diff -u -r policy-1.18.2/file_contexts/types.fc policy-1.18.2.new/file_contexts/types.fc --- policy-1.18.2/file_contexts/types.fc 2004-11-08 12:30:07.495998998 -0500 +++ policy-1.18.2.new/file_contexts/types.fc 2004-11-08 12:28:21.830953399 -0500 @@ -202,6 +202,7 @@ /u?dev/fb[0-9]* -c system_u:object_r:framebuf_device_t /u?dev/apm_bios -c system_u:object_r:apm_bios_t /u?dev/cpu/mtrr -c system_u:object_r:mtrr_device_t +/u?dev/pmu -c system_u:object_r:power_device_t /u?dev/(radio|video|vbi|vtx).* -c system_u:object_r:v4l_device_t /u?dev/winradio. -c system_u:object_r:v4l_device_t /u?dev/vttuner -c system_u:object_r:v4l_device_t diff -u -r policy-1.18.2/types/device.te policy-1.18.2.new/types/device.te --- policy-1.18.2/types/device.te 2004-11-05 23:39:10.000000000 -0500 +++ policy-1.18.2.new/types/device.te 2004-11-08 12:27:25.530322964 -0500 @@ -130,6 +130,8 @@ # Type for /dev/cpu/mtrr type mtrr_device_t, device_type, dev_fs; +# Type for /dev/pmu +type power_device_t, device_type, dev_fs; # Type for /dev/apm_bios type apm_bios_t, device_type, dev_fs;