From 09efc0087ae9fa406c83f011583058498fdbd199 Mon Sep 17 00:00:00 2001 From: bauen1 Date: Sun, 24 Nov 2019 15:07:58 +0100 Subject: [PATCH] added bpf_t filesystem label --- policy/modules/kernel/filesystem.fc | 2 ++ policy/modules/kernel/filesystem.te | 6 ++++++ 2 files changed, 8 insertions(+) diff --git a/policy/modules/kernel/filesystem.fc b/policy/modules/kernel/filesystem.fc index f46a28063..a5d976863 100644 --- a/policy/modules/kernel/filesystem.fc +++ b/policy/modules/kernel/filesystem.fc @@ -11,6 +11,8 @@ /usr/lib/udev/devices/shm -d gen_context(system_u:object_r:tmpfs_t,s0) /usr/lib/udev/devices/shm/.* <> +/sys/fs/bpf(/.*)? <> + /sys/fs/cgroup -d gen_context(system_u:object_r:cgroup_t,s0) /sys/fs/cgroup/.* <> /sys/fs/cgroup/[^/]+ -l gen_context(system_u:object_r:cgroup_t,s0) diff --git a/policy/modules/kernel/filesystem.te b/policy/modules/kernel/filesystem.te index a803882fc..b3e50f58f 100644 --- a/policy/modules/kernel/filesystem.te +++ b/policy/modules/kernel/filesystem.te @@ -67,6 +67,12 @@ fs_type(binfmt_misc_fs_t) files_mountpoint(binfmt_misc_fs_t) genfscon binfmt_misc / gen_context(system_u:object_r:binfmt_misc_fs_t,s0) +type bpf_t; +fs_type(bpf_t) +files_mountpoint(bpf_t) +dev_associate_sysfs(bpf_t) +genfscon bpf / gen_context(system_u:object_r:bpf_t,s0) + type capifs_t; fs_type(capifs_t) files_mountpoint(capifs_t)