diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if index 6e0a9499e..e401bd77b 100644 --- a/policy/modules/kernel/devices.if +++ b/policy/modules/kernel/devices.if @@ -4851,6 +4851,25 @@ interface(`dev_rw_tpm',` rw_chr_files_pattern($1, device_t, tpm_device_t) ') +##################### +## +## Allow open/read/write uhid device +## +## +## +## Domain allowed rw to uhid device +## to communicate with uhid input node +## +## +# +interface(`dev_rw_uhid',` + gen_require(` + type uhid_device_t; + ') + + allow $1 uhid_device_t:chr_file rw_chr_file_perms; +') + ######################################## ## ## Read from pseudo random number generator devices (e.g., /dev/urandom). @@ -5858,21 +5877,3 @@ interface(`dev_unconfined',` typeattribute $1 devices_unconfined_type; ') - -##################### -## -## Allow open/read/write uhid device -## -## -## -## Domain allowed rw to uhid device -## to communicate with uhid input node -## -## -# -interface(`dev_rw_uhid',` - gen_require(` - type uhid_device_t; - ') - allow $1 uhid_device_t:chr_file rw_chr_file_perms ; -')