diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if index 13635c9ea..a8f71ffc3 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -2666,6 +2666,24 @@ interface(`kernel_rw_unlabeled_blk_files',` allow $1 unlabeled_t:blk_file rw_blk_file_perms; ') +######################################## +## +## Delete unlabeled block device nodes. +## +## +## +## Domain allowed access. +## +## +# +interface(`kernel_delete_unlabeled_blk_files',` + gen_require(` + type unlabeled_t; + ') + + delete_blk_files_pattern($1, unlabeled_t, unlabeled_t) +') + ######################################## ## ## Create, read, write, and delete unlabeled block device nodes.