diff options
| author | Dominick Grift <dominick.grift@defensec.nl> | 2024-12-21 19:32:21 +0100 |
|---|---|---|
| committer | Dominick Grift <dominick.grift@defensec.nl> | 2024-12-21 19:32:21 +0100 |
| commit | cceecdf58585eb6119ef2493be1326e5c3551da2 (patch) | |
| tree | e2998c5e09e67c46b98f8fd00e166f16308f1b19 | |
| parent | bfd5cc5708770127750c8b07ed5035206b842c6f (diff) | |
| download | selinux-policy-cceecdf58585eb6119ef2493be1326e5c3551da2.tar.gz | |
iouringav: fix dev.unconfined
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
| -rw-r--r-- | src/misc/av/iouringav.cil | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/src/misc/av/iouringav.cil b/src/misc/av/iouringav.cil index 8656573..e7a398d 100644 --- a/src/misc/av/iouringav.cil +++ b/src/misc/av/iouringav.cil @@ -20,10 +20,6 @@ (allow typeattr debugfile.typeattr (io_uring (cmd)))) -(in dev.unconfined - - (allow typeattr dev.typeattr (io_uring (cmd)))) - (in file.unconfined (allow typeattr file.typeattr (io_uring (cmd)))) @@ -54,6 +50,10 @@ (allow typeattr pstorefile.typeattr (io_uring (cmd)))) +(in ptytermdev.unconfined + + (allow typeattr ptytermdev.typeattr (io_uring (cmd)))) + (in rbacsep (constrain (io_uring (override_creds)) @@ -68,6 +68,10 @@ (allow typeattr securityfile.typeattr (io_uring (cmd)))) +(in serialtermdev.unconfined + + (allow typeattr serialtermdev.typeattr (io_uring (cmd)))) + (in stordev.unconfined (allow typeattr stordev.typeattr (io_uring (cmd)))) @@ -85,10 +89,6 @@ (allow typeattr sysfile.typeattr (io_uring (cmd)))) -(in termdev.unconfined - - (allow typeattr termdev.typeattr (io_uring (cmd)))) - (in tracefile.unconfined (allow typeattr tracefile.typeattr (io_uring (cmd)))) |