rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

add in missing devices

Browse Source
This commit is contained in:
Chris PeBenito 2005-04-29 20:35:49 +00:00
parent 05a5cdccc3
commit 7009881cc0
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
refpolicy/policy/modules/kernel/devices.te
View File

@ -16,6 +16,10 @@ files_make_file(device_t)
files_make_mountpoint(device_t) files_make_mountpoint(device_t)
filesystem_tmpfs_associate(device_t) filesystem_tmpfs_associate(device_t)
type cardmgr_dev_t, device_node;
filesystem_associate(cardmgr_dev_t)
filesystem_tmpfs_associate(cardmgr_dev_t)
# Only directories and symlinks should be labeled device_t. # Only directories and symlinks should be labeled device_t.
# If there are other files with this type, it is wrong. # If there are other files with this type, it is wrong.
# Relabelto is allowed for setfiles to function, in case # Relabelto is allowed for setfiles to function, in case
@ -97,6 +101,13 @@ type framebuf_device_t, device_node;
filesystem_associate(framebuf_device_t) filesystem_associate(framebuf_device_t)
filesystem_tmpfs_associate(framebuf_device_t) filesystem_tmpfs_associate(framebuf_device_t)
#
# Type for /dev/mapper/control
#
type lvm_control_t, device_node;
filesystem_associate(lvm_control_t_t)
filesystem_tmpfs_associate(lvm_control_t_t)
# #
# Type for /dev/cpu/mtrr and /proc/mtrr # Type for /dev/cpu/mtrr and /proc/mtrr
# #
@ -118,3 +129,7 @@ filesystem_tmpfs_associate(power_device_t)
type sound_device_t, device_node; type sound_device_t, device_node;
filesystem_associate(sound_device_t) filesystem_associate(sound_device_t)
filesystem_tmpfs_associate(sound_device_t) filesystem_tmpfs_associate(sound_device_t)
type xserver_misc_device_t, device_node;
filesystem_associate(xserver_misc_device_t)
filesystem_tmpfs_associate(xserver_misc_device_t)

3
refpolicy/policy/modules/kernel/storage.te
View File

@ -14,6 +14,9 @@ neverallow ~fixed_disk_raw_read fixed_disk_device_t:{ chr_file blk_file } read;
neverallow ~fixed_disk_raw_write fixed_disk_device_t:{ chr_file blk_file } { append write }; neverallow ~fixed_disk_raw_write fixed_disk_device_t:{ chr_file blk_file } { append write };
devices_make_device_node(fixed_disk_device_t) devices_make_device_node(fixed_disk_device_t)
type lvm_vg_t;
devices_make_device_node(lvm_vg_t)
# #
# scsi_generic_device_t is the type of /dev/sg* # scsi_generic_device_t is the type of /dev/sg*
# it gives access to ALL SCSI devices (both fixed and removable) # it gives access to ALL SCSI devices (both fixed and removable)