nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

device: Move dev_rw_uhid definition. 

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2024-06-05 15:25:24 -04:00
parent 7a33b4bc87
commit 1cbe455a5e
1 changed files with 19 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
policy/modules/kernel/devices.if
View File

@ -4851,6 +4851,25 @@ interface(`dev_rw_tpm',`
rw_chr_files_pattern($1, device_t, tpm_device_t) rw_chr_files_pattern($1, device_t, tpm_device_t)
') ')
#####################
## <summary>
## Allow open/read/write uhid device
## </summary>
## <param name="domain">
## <summary>
## Domain allowed rw to uhid device
## to communicate with uhid input node
## </summary>
## </param>
#
interface(`dev_rw_uhid',`
gen_require(`
type uhid_device_t;
')
allow $1 uhid_device_t:chr_file rw_chr_file_perms;
')
######################################## ########################################
## <summary> ## <summary>
## Read from pseudo random number generator devices (e.g., /dev/urandom). ## Read from pseudo random number generator devices (e.g., /dev/urandom).
@ -5858,21 +5877,3 @@ interface(`dev_unconfined',`
typeattribute $1 devices_unconfined_type; typeattribute $1 devices_unconfined_type;
') ')
#####################
## <summary>
## Allow open/read/write uhid device
## </summary>
## <param name="domain">
## <summary>
## Domain allowed rw to uhid device
## to communicate with uhid input node
## </summary>
## </param>
#
interface(`dev_rw_uhid',`
gen_require(`
type uhid_device_t;
')
allow $1 uhid_device_t:chr_file rw_chr_file_perms ;
')