Trivial tweaks to devtmpfs patches.
This commit is contained in:
parent
2fc79f1ef4
commit
0d24805fd0
@ -291,13 +291,13 @@ mls_trusted_object(zero_device_t)
|
|||||||
# Rules for all device nodes
|
# Rules for all device nodes
|
||||||
#
|
#
|
||||||
|
|
||||||
|
allow device_node device_t:filesystem associate;
|
||||||
|
|
||||||
fs_associate(device_node)
|
fs_associate(device_node)
|
||||||
fs_associate_tmpfs(device_node)
|
fs_associate_tmpfs(device_node)
|
||||||
|
|
||||||
files_associate_tmp(device_node)
|
files_associate_tmp(device_node)
|
||||||
|
|
||||||
allow device_node device_t:filesystem associate;
|
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# Unconfined access to this module
|
# Unconfined access to this module
|
||||||
|
@ -59,7 +59,6 @@ dev_rw_lvm_control(mount_t)
|
|||||||
dev_dontaudit_getattr_all_chr_files(mount_t)
|
dev_dontaudit_getattr_all_chr_files(mount_t)
|
||||||
dev_dontaudit_getattr_memory_dev(mount_t)
|
dev_dontaudit_getattr_memory_dev(mount_t)
|
||||||
dev_getattr_sound_dev(mount_t)
|
dev_getattr_sound_dev(mount_t)
|
||||||
|
|
||||||
# Early devtmpfs, before udev relabel
|
# Early devtmpfs, before udev relabel
|
||||||
dev_dontaudit_rw_generic_chr_files(mount_t)
|
dev_dontaudit_rw_generic_chr_files(mount_t)
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user