diff options
| author | Dominick Grift <dominick.grift@defensec.nl> | 2024-12-18 13:03:20 +0100 |
|---|---|---|
| committer | Dominick Grift <dominick.grift@defensec.nl> | 2024-12-18 13:03:20 +0100 |
| commit | 179eb23bb725e40b53bbd5e63026abd0655f25ac (patch) | |
| tree | ab8e01198eaa3cafb8c2dbfb22f3c5fd690aa011 /src/dev/termdev/serialtermdev.cil | |
| parent | 5b2794384bceeb62ab5be2cd11f05365fa82bcfd (diff) | |
| download | selinux-policy-179eb23bb725e40b53bbd5e63026abd0655f25ac.tar.gz | |
clean up dev.unconfined
Diffstat (limited to 'src/dev/termdev/serialtermdev.cil')
| -rw-r--r-- | src/dev/termdev/serialtermdev.cil | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/dev/termdev/serialtermdev.cil b/src/dev/termdev/serialtermdev.cil index 510ea76..059e9ef 100644 --- a/src/dev/termdev/serialtermdev.cil +++ b/src/dev/termdev/serialtermdev.cil @@ -99,6 +99,10 @@ (allow typeattr serialtermdev.typeattr (chr_file (not (audit_access execmod)))))) +(in termdev.unconfined + + (call .serialtermdev.unconfined.type (typeattr))) + (in after serialtermdev.appendinherited_all_chr_files (allowx ARG1 typeattr IOCTLCONSOLE_NOT_TIOCLINUX) (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) |