diff --git a/refpolicy/policy/modules/kernel/devices.te b/refpolicy/policy/modules/kernel/devices.te index 422d7fbc..9c27f2e9 100644 --- a/refpolicy/policy/modules/kernel/devices.te +++ b/refpolicy/policy/modules/kernel/devices.te @@ -16,6 +16,10 @@ files_make_file(device_t) files_make_mountpoint(device_t) filesystem_tmpfs_associate(device_t) +type cardmgr_dev_t, device_node; +filesystem_associate(cardmgr_dev_t) +filesystem_tmpfs_associate(cardmgr_dev_t) + # Only directories and symlinks should be labeled device_t. # If there are other files with this type, it is wrong. # Relabelto is allowed for setfiles to function, in case @@ -97,6 +101,13 @@ type framebuf_device_t, device_node; filesystem_associate(framebuf_device_t) filesystem_tmpfs_associate(framebuf_device_t) +# +# Type for /dev/mapper/control +# +type lvm_control_t, device_node; +filesystem_associate(lvm_control_t_t) +filesystem_tmpfs_associate(lvm_control_t_t) + # # Type for /dev/cpu/mtrr and /proc/mtrr # @@ -118,3 +129,7 @@ filesystem_tmpfs_associate(power_device_t) type sound_device_t, device_node; filesystem_associate(sound_device_t) filesystem_tmpfs_associate(sound_device_t) + +type xserver_misc_device_t, device_node; +filesystem_associate(xserver_misc_device_t) +filesystem_tmpfs_associate(xserver_misc_device_t) diff --git a/refpolicy/policy/modules/kernel/storage.te b/refpolicy/policy/modules/kernel/storage.te index 786adcc9..eb53b769 100644 --- a/refpolicy/policy/modules/kernel/storage.te +++ b/refpolicy/policy/modules/kernel/storage.te @@ -14,6 +14,9 @@ neverallow ~fixed_disk_raw_read fixed_disk_device_t:{ chr_file blk_file } read; neverallow ~fixed_disk_raw_write fixed_disk_device_t:{ chr_file blk_file } { append write }; devices_make_device_node(fixed_disk_device_t) +type lvm_vg_t; +devices_make_device_node(lvm_vg_t) + # # scsi_generic_device_t is the type of /dev/sg* # it gives access to ALL SCSI devices (both fixed and removable)