diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if index a8f71ffc3..8722c7650 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -2740,6 +2740,25 @@ interface(`kernel_dontaudit_write_unlabeled_chr_files',` dontaudit $1 unlabeled_t:file write; ') +######################################## +## +## Delete unlabeled character device nodes. +## +## +## +## Domain allowed access. +## +## +# +interface(`kernel_delete_unlabeled_chr_files',` + gen_require(` + type unlabeled_t; + ') + + delete_chr_files_pattern($1, unlabeled_t, unlabeled_t) +') + + ######################################## ## ## Create, read, write, and delete unlabeled character device nodes.