diff --git a/policy/modules/contrib b/policy/modules/contrib index 3c2cbee38..a4b70fa0f 160000 --- a/policy/modules/contrib +++ b/policy/modules/contrib @@ -1 +1 @@ -Subproject commit 3c2cbee38e9d220b9cf1844ceb53f46e0a7b210e +Subproject commit a4b70fa0fe684595d4b3ff5f12fa043a9e723d11 diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if index 2e6a37607..ed52733d4 100644 --- a/policy/modules/kernel/terminal.if +++ b/policy/modules/kernel/terminal.if @@ -536,6 +536,23 @@ interface(`term_relabel_pty_dirs',` allow $1 devpts_t:dir relabel_dir_perms; ') +######################################## +## +## Get the attributes of generic pty devices. +## +## +## +## Domain to allow +## +## +# +interface(`term_getattr_generic_ptys',` + gen_require(` + type devpts_t; + ') + + allow $1 devpts_t:chr_file getattr; +') ######################################## ## ## Do not audit attempts to get the attributes diff --git a/policy/modules/kernel/terminal.te b/policy/modules/kernel/terminal.te index 01e1516ed..d25f4d284 100644 --- a/policy/modules/kernel/terminal.te +++ b/policy/modules/kernel/terminal.te @@ -1,4 +1,4 @@ -policy_module(terminal, 1.14.0) +policy_module(terminal, 1.14.1) ######################################## #