Add comment for setfiles using /dev/console when it needs to be relabeled.

2013-09-26 08:31:41 -04:00 · 2013-09-26 08:31:41 -04:00 · b2eaf87020
parent dae823c43a
commit b2eaf87020
1 changed files with 1 additions and 0 deletions
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@ -543,6 +543,7 @@ kernel_dontaudit_list_all_proc(setfiles_t)
 kernel_dontaudit_list_all_sysctls(setfiles_t)

 dev_relabel_all_dev_nodes(setfiles_t)
+# to handle when /dev/console needs to be relabeled
 dev_rw_generic_chr_files(setfiles_t)

 domain_use_interactive_fds(setfiles_t)