nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update terminal module 

* label content of /dev/pts/ correctly
* remove deprecated interfaces
This commit is contained in:
cgzones 2017-01-06 15:03:08 +01:00
parent a67c2a819d
commit 11a0508ede
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/kernel/terminal.fc
View File

@ -14,7 +14,6 @@
/dev/ip2[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) /dev/ip2[^/]* -c gen_context(system_u:object_r:tty_device_t,s0)
/dev/isdn.* -c gen_context(system_u:object_r:tty_device_t,s0) /dev/isdn.* -c gen_context(system_u:object_r:tty_device_t,s0)
/dev/ptmx -c gen_context(system_u:object_r:ptmx_t,s0) /dev/ptmx -c gen_context(system_u:object_r:ptmx_t,s0)
/dev/pts/ptmx -c gen_context(system_u:object_r:ptmx_t,s0)
/dev/rfcomm[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0) /dev/rfcomm[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0)
/dev/slamr[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0) /dev/slamr[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0)
/dev/tty -c gen_context(system_u:object_r:devtty_t,s0) /dev/tty -c gen_context(system_u:object_r:devtty_t,s0)
@ -25,6 +24,8 @@
/dev/pty/.* -c gen_context(system_u:object_r:bsdpty_device_t,s0) /dev/pty/.* -c gen_context(system_u:object_r:bsdpty_device_t,s0)
/dev/pts -d gen_context(system_u:object_r:devpts_t,s0-mls_systemhigh) /dev/pts -d gen_context(system_u:object_r:devpts_t,s0-mls_systemhigh)
/dev/pts/ptmx -c gen_context(system_u:object_r:devpts_t,s0)
/dev/pts/[0-9]+ -c gen_context(system_u:object_r:user_devpts_t,s0)
/dev/tts/[^/]* -c gen_context(system_u:object_r:tty_device_t,s0) /dev/tts/[^/]* -c gen_context(system_u:object_r:tty_device_t,s0)
@ -37,7 +38,7 @@
/dev/xvc[0-9]* -c gen_context(system_u:object_r:tty_device_t,s0) /dev/xvc[0-9]* -c gen_context(system_u:object_r:tty_device_t,s0)
ifdef(`distro_gentoo',` ifdef(`distro_gentoo',`
/dev/tts/[0-9]* -c gen_context(system_u:object_r:tty_device_t,s0) /dev/tts/[0-9]+ -c gen_context(system_u:object_r:tty_device_t,s0)
# used by init scripts to initally populate udev /dev # used by init scripts to initally populate udev /dev
/lib/udev/devices/console -c gen_context(system_u:object_r:console_device_t,s0) /lib/udev/devices/console -c gen_context(system_u:object_r:console_device_t,s0)