From 93784927ca7fa3993e80efafe9fa0a3e2f5f8b49 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Mon, 19 Mar 2007 18:48:14 +0000
Subject: [PATCH] add kvmfs support, from dan

---
 Changelog                       |  1 +
 policy/modules/kernel/kernel.te | 10 +++++++++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/Changelog b/Changelog
index b831d811..c175f1c0 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,4 @@
+- Patch to support kvmfs from Dan Walsh.
 - Patch for misc fixes in sudo from Dan Walsh.
 - Patch to fix netlabel recvfrom MLS constraint from Paul Moore.
 - Patch for handling restart of nscd when ran from useradd, groupadd, and
diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te
index 82df3496..81d2a2ab 100644
--- a/policy/modules/kernel/kernel.te
+++ b/policy/modules/kernel/kernel.te
@@ -1,5 +1,5 @@
 
-policy_module(kernel,1.5.1)
+policy_module(kernel,1.5.2)
 
 ########################################
 #
@@ -50,6 +50,14 @@ fs_type(debugfs_t)
 allow debugfs_t self:filesystem associate;
 genfscon debugfs / gen_context(system_u:object_r:debugfs_t,s0)
 
+#
+# kvmFS
+#
+
+type kvmfs_t;
+fs_type(kvmfs_t)
+genfscon kvmfs / gen_context(system_u:object_r:kvmfs_t,s0)
+
 #
 # Procfs types
 #