diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if index aace3ccd8..ad8c01b24 100644 --- a/policy/modules/kernel/devices.if +++ b/policy/modules/kernel/devices.if @@ -4238,7 +4238,7 @@ interface(`dev_rw_sysdig',` ######################################## ## -## Mount a filesystem on sysfs. +## Mount a filesystem on sysfs. (Deprecated) ## ## ## @@ -4247,11 +4247,8 @@ interface(`dev_rw_sysdig',` ## # interface(`dev_mounton_sysfs',` - gen_require(` - type sysfs_t; - ') - - allow $1 sysfs_t:dir mounton; + refpolicywarn(`$0($*) has been deprecated, please use dev_mounton_sysfs_dirs() instead.') + dev_mounton_sysfs_dirs($1) ') ######################################## @@ -4366,7 +4363,7 @@ interface(`dev_dontaudit_read_sysfs',` ######################################## ## -## mounton sysfs directories. +## Mount on sysfs directories. ## ## ## diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te index 9a938fa7e..737bb741d 100644 --- a/policy/modules/kernel/kernel.te +++ b/policy/modules/kernel/kernel.te @@ -284,7 +284,7 @@ corenet_ib_access_unlabeled_pkeys(kernel_t) corenet_ib_manage_subnet_all_endports(kernel_t) corenet_ib_manage_subnet_unlabeled_endports(kernel_t) -dev_mounton_sysfs(kernel_t) +dev_mounton_sysfs_dirs(kernel_t) dev_read_sysfs(kernel_t) dev_search_usbfs(kernel_t) # devtmpfs handling: