diff --git a/refpolicy/policy/modules/kernel/terminal.if b/refpolicy/policy/modules/kernel/terminal.if index 3887e741..e1002e55 100644 --- a/refpolicy/policy/modules/kernel/terminal.if +++ b/refpolicy/policy/modules/kernel/terminal.if @@ -41,6 +41,20 @@ class chr_file { read write }; devices_list_device_nodes_depend ') +######################################## +# +# terminal_ignore_use_console(domain,[`optional']) +# +define(`terminal_ignore_use_console',` +requires_block_template(terminal_ignore_use_console_depend,$2) +dontaudit $1 console_device_t:chr_file { read write }; +') + +define(`terminal_ignore_use_console_depend',` +type console_device_t; +class chr_file { read write }; +') + ######################################## # # terminal_use_controlling_terminal(domain,[`optional'])