RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

devices, kernel: deprecate dev_mounton_sysfs 

dev_mounton_sysfs is a duplicate of dev_mounton_sysfs_dirs

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-12-16 13:16:47 -05:00
parent bd5fb161df
commit dea8a63ed3
2 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
policy/modules/kernel/devices.if
View File

@ -4238,7 +4238,7 @@ interface(`dev_rw_sysdig',`
########################################
## <summary>
## Mount a filesystem on sysfs.
## Mount a filesystem on sysfs. (Deprecated)
## </summary>
## <param name="domain">
## <summary>
@ -4247,11 +4247,8 @@ interface(`dev_rw_sysdig',`
## </param>
#
interface(`dev_mounton_sysfs',`
gen_require(`
type sysfs_t;
')
allow $1 sysfs_t:dir mounton;
refpolicywarn(`$0($*) has been deprecated, please use dev_mounton_sysfs_dirs() instead.')
dev_mounton_sysfs_dirs($1)
')
########################################
@ -4366,7 +4363,7 @@ interface(`dev_dontaudit_read_sysfs',`
########################################
## <summary>
## mounton sysfs directories.
## Mount on sysfs directories.
## </summary>
## <param name="domain">
## <summary>

2
policy/modules/kernel/kernel.te
View File

@ -284,7 +284,7 @@ corenet_ib_access_unlabeled_pkeys(kernel_t)
corenet_ib_manage_subnet_all_endports(kernel_t)
corenet_ib_manage_subnet_unlabeled_endports(kernel_t)
dev_mounton_sysfs(kernel_t)
dev_mounton_sysfs_dirs(kernel_t)
dev_read_sysfs(kernel_t)
dev_search_usbfs(kernel_t)
# devtmpfs handling: