RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

vhost: Add /dev/vhost-scsi device of type vhost_device_t. 

Signed-off-by: Jagannathan Raman <jag.raman@oracle.com>
This commit is contained in:
Jagannathan Raman 2018-07-13 13:05:36 -04:00 committed by Chris PeBenito
parent d301e83161
commit ce4fe74fe3
3 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/kernel/devices.fc
View File

@ -120,6 +120,7 @@ ifdef(`distro_suse', `
')
/dev/vfio/.+ -c gen_context(system_u:object_r:vfio_device_t,s0)
/dev/vhost-net -c gen_context(system_u:object_r:vhost_device_t,s0)
/dev/vhost-scsi -c gen_context(system_u:object_r:vhost_device_t,s0)
/dev/vbi.* -c gen_context(system_u:object_r:v4l_device_t,s0)
/dev/vbox.* -c gen_context(system_u:object_r:xserver_misc_device_t,s0)
/dev/vga_arbiter -c gen_context(system_u:object_r:xserver_misc_device_t,s0)

2
policy/modules/kernel/devices.if
View File

@ -4839,7 +4839,7 @@ interface(`dev_relabelfrom_vfio_dev',`
############################
## <summary>
## Allow read/write the vhost net device
## Allow read/write the vhost devices
## </summary>
## <param name="domain">
## <summary>

3
policy/modules/kernel/devices.te
View File

@ -286,7 +286,8 @@ type v4l_device_t;
dev_node(v4l_device_t)
#
# vhost_device_t is the type for /dev/vhost-net
# vhost_device_t is the type for vhost devices like
# /dev/vhost-net and /dev/vhost-scsi
#
type vhost_device_t;
dev_node(vhost_device_t)