summaryrefslogtreecommitdiff
path: root/src/fs/noseclabelfs
diff options
context:
space:
mode:
authorJohn Turner <jturner.usa@gmail.com>2025-08-23 20:19:42 -0400
committerJohn Turner <jturner.usa@gmail.com>2025-08-23 20:19:42 -0400
commit99c9dafa7de761aeab18dc95a13f947c9d920c68 (patch)
tree2bd8a409bbab5d86a11addc6c4266b34c308ffc6 /src/fs/noseclabelfs
parent43917f18a8d29961f9500fd406a776b6fac33e1b (diff)
downloadselinux-policy-99c9dafa7de761aeab18dc95a13f947c9d920c68.tar.gz
move "efivar" out of misc.cil
Diffstat (limited to 'src/fs/noseclabelfs')
-rw-r--r--src/fs/noseclabelfs/efivarnoseclabelfs.cil4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/fs/noseclabelfs/efivarnoseclabelfs.cil b/src/fs/noseclabelfs/efivarnoseclabelfs.cil
index 7ff8fd2..b010b06 100644
--- a/src/fs/noseclabelfs/efivarnoseclabelfs.cil
+++ b/src/fs/noseclabelfs/efivarnoseclabelfs.cil
@@ -2,7 +2,9 @@
;; SPDX-License-Identifier: Unlicense
(block efivar
+ (blockinherit .noseclabelfs.template)
(genfscon "efivarfs" "/" fs_context)
- (blockinherit .noseclabelfs.template))
+ (filecon "/sys/firmware/efi/efivars" dir ())
+ (filecon "/sys/firmware/efi/efivars/.*" any ()))