move "fs.unconfined" out of misc.cil

1 files changed, 6 insertions, 2 deletions

diff --git a/src/fs.cil b/src/fs.cil
index 79f09d9..3d78e49 100644
--- a/src/fs.cil
+++ b/src/fs.cil
@@ -569,7 +569,6 @@
 	(blockinherit .fs.macro_template_fs))
 
     (block unconfined
-
 	(macro type ((type ARG1))
 	    (typeattributeset typeattr ARG1))
 
@@ -586,7 +585,12 @@
 	(allow typeattr fs.typeattr
 	    (lnk_file (not (audit_access execmod map mounton))))
 	(allow typeattr fs.typeattr
-	    (sock_file (not (audit_access execmod map mounton))))))
+	    (sock_file (not (audit_access execmod map mounton))))
+
+        (call .dos.boot_file_type_transition_fs (typeattr))
+        (call .dos.root_file_type_transition_fs (typeattr))
+        (call .proc.root_file_type_transition_fs (typeattr))
+        (call .sys.root_file_type_transition_fs (typeattr))))
 
 (in invalid.unconfined