diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc index 3b9be43f9..bdff6b1a4 100644 --- a/policy/modules/kernel/devices.fc +++ b/policy/modules/kernel/devices.fc @@ -21,6 +21,7 @@ /dev/controlD64 -c gen_context(system_u:object_r:xserver_misc_device_t,s0) /dev/crash -c gen_context(system_u:object_r:crash_device_t,mls_systemhigh) /dev/dahdi/.* -c gen_context(system_u:object_r:sound_device_t,s0) +/dev/dax[0-9]\.[0-9] -c gen_context(system_u:object_r:dax_device_t,mls_systemhigh) /dev/dmfm -c gen_context(system_u:object_r:sound_device_t,s0) /dev/dmmidi.* -c gen_context(system_u:object_r:sound_device_t,s0) /dev/dsp.* -c gen_context(system_u:object_r:sound_device_t,s0) diff --git a/policy/modules/kernel/devices.te b/policy/modules/kernel/devices.te index a0331212c..88a4246e8 100644 --- a/policy/modules/kernel/devices.te +++ b/policy/modules/kernel/devices.te @@ -82,6 +82,12 @@ dev_node(crash_device_t) type crypt_device_t; dev_node(crypt_device_t) +# +# Type for /dev/dax*.* +# +type dax_device_t; +dev_node(dax_device_t) + # # dlm_misc_device_t is the type of /dev/misc/dlm.* # diff --git a/policy/modules/kernel/storage.fc b/policy/modules/kernel/storage.fc index 926327bd8..b6dfcd9fc 100644 --- a/policy/modules/kernel/storage.fc +++ b/policy/modules/kernel/storage.fc @@ -41,6 +41,7 @@ /dev/pcd[0-3] -b gen_context(system_u:object_r:removable_device_t,s0) /dev/pd[a-d][^/]* -b gen_context(system_u:object_r:removable_device_t,s0) /dev/pg[0-3] -c gen_context(system_u:object_r:removable_device_t,s0) +/dev/pmem[0-9]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) /dev/ps3d.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) /dev/ram.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) /dev/(raw/)?rawctl -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)