[refpolicy] kernel_devices.patch

Christopher J. PeBenito cpebenito at tresys.com
Thu Mar 5 09:59:44 CST 2009


On Wed, 2009-03-04 at 16:32 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/kernel_devices.patch
> 
> 
> labels for
> 
> /dev/3dfx
> /dev/autofs
> /dev/gfx
> /dev/graphics
> ...
> 
> 
> Java wants to attempt to append to the rand device.  Dontaudit for now
> 
> interface to manage device_t directories
> 
> interfaces to handle new null devices
> usb devices
> 
> kvm

Merged with a bunch of reorganization.

Is this right?

+/dev/bometric/sensor.*	-c gen_context(system_u:object_r:event_device_t,s0)

should it be /dev/biometric instead of /dev/bometric?

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



More information about the refpolicy mailing list