selinux-refpolicy.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [refpolicy] [PATCH] allow udisksd rx access to /dev/mem for EFI data
@ 2018-02-16  6:12 Russell Coker
  0 siblings, 0 replies; only message in thread
From: Russell Coker @ 2018-02-16  6:12 UTC (permalink / raw)
  To: refpolicy

Please merge this

Index: refpolicy-2.20180216/policy/modules/contrib/devicekit.te
===================================================================
--- refpolicy-2.20180216.orig/policy/modules/contrib/devicekit.te
+++ refpolicy-2.20180216/policy/modules/contrib/devicekit.te
@@ -109,6 +109,8 @@ dev_getattr_usbfs_dirs(devicekit_disk_t)
 dev_manage_generic_files(devicekit_disk_t)
 dev_read_urand(devicekit_disk_t)
 dev_rw_sysfs(devicekit_disk_t)
+# /dev/mem is accessed by libparted to get EFI data
+dev_rx_raw_memory(devicekit_disk_t)
 
 domain_getattr_all_pipes(devicekit_disk_t)
 domain_getattr_all_sockets(devicekit_disk_t)

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2018-02-16  6:12 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-02-16  6:12 [refpolicy] [PATCH] allow udisksd rx access to /dev/mem for EFI data Russell Coker

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).