diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te index 3714169c..8db65d27 100644 --- a/policy/modules/kernel/kernel.te +++ b/policy/modules/kernel/kernel.te @@ -1,5 +1,5 @@ -policy_module(kernel,1.9.3) +policy_module(kernel,1.9.4) ######################################## # @@ -234,6 +234,7 @@ dev_search_usbfs(kernel_t) # Mount root file system. Used when loading a policy # from initrd, then mounting the root filesystem fs_mount_all_fs(kernel_t) +fs_unmount_all_fs(kernel_t) selinux_load_policy(kernel_t) @@ -256,6 +257,8 @@ mcs_process_set_categories(kernel_t) mls_process_read_up(kernel_t) mls_process_write_down(kernel_t) +mls_file_write_all_levels(kernel_t) +mls_file_read_all_levels(kernel_t) ifdef(`distro_redhat',` # Bugzilla 222337