From dfcdb40e6ea1346f01a3bf2488c5591d91fa7325 Mon Sep 17 00:00:00 2001 From: Luis Ressel Date: Tue, 12 Sep 2017 04:11:16 +0200 Subject: [PATCH] kernel: Add map permission to the dev_{read, write}_sound* interfaces sds already added it to dev_read_sound_mixer, but it's also needed in the other interfaces. --- policy/modules/kernel/devices.if | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if index 39069c177..1967118e8 100644 --- a/policy/modules/kernel/devices.if +++ b/policy/modules/kernel/devices.if @@ -3750,6 +3750,7 @@ interface(`dev_read_sound',` ') read_chr_files_pattern($1, device_t, sound_device_t) + allow $1 sound_device_t:chr_file map; ') ######################################## @@ -3768,6 +3769,7 @@ interface(`dev_write_sound',` ') write_chr_files_pattern($1, device_t, sound_device_t) + allow $1 sound_device_t:chr_file map; ') ######################################## @@ -3805,6 +3807,7 @@ interface(`dev_write_sound_mixer',` ') write_chr_files_pattern($1, device_t, sound_device_t) + allow $1 sound_device_t:chr_file map; ') ########################################