RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

getattr on unlabeled blk devs 

The following has been in my tree for a few years.  It allows initrc_t to stat
devices early in the boot process.

>From ad46ce856a1a780cf6c3a0bb741794019e03edc2 Mon Sep 17 00:00:00 2001
From: Dominick Grift <dominick.grift@gmail.com>
Date: Sat, 9 Nov 2013 10:45:09 +0100
Subject: [PATCH] init: startpar (initrc_t) gets attributes of /dev/dm-0
 (device_t) early on boot, soon later the node context is properly reset
 (debian only) init: startpar (initrc_t) gets attributes of /proc/kcore file

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
This commit is contained in:
Russell Coker 2016-08-03 15:48:19 +10:00 committed by Chris PeBenito
parent 493070a95b
commit a4b8f773c1
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/system/init.te
View File

@ -568,6 +568,9 @@ userdom_read_user_home_content_files(initrc_t)
userdom_use_user_terminals(initrc_t) userdom_use_user_terminals(initrc_t)
ifdef(`distro_debian',` ifdef(`distro_debian',`
kernel_getattr_core_if(initrc_t)
dev_getattr_generic_blk_files(initrc_t)
dev_setattr_generic_dirs(initrc_t) dev_setattr_generic_dirs(initrc_t)
fs_tmpfs_filetrans(initrc_t, initrc_var_run_t, dir) fs_tmpfs_filetrans(initrc_t, initrc_var_run_t, dir)