diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te index d379ef3d3..ca10e6665 100644 --- a/policy/modules/system/lvm.te +++ b/policy/modules/system/lvm.te @@ -234,6 +234,7 @@ dev_manage_generic_symlinks(lvm_t) dev_relabel_generic_dev_dirs(lvm_t) dev_manage_generic_blk_files(lvm_t) # Read /sys/block. Device mapper metadata is kept there. +# Write read_ahead_kb dev_rw_sysfs(lvm_t) # cjp: this has no effect since LVM does not # have lnk_file relabelto for anything else.