summaryrefslogtreecommitdiff
path: root/src/dev/stordev/removablestordev.cil
diff options
context:
space:
mode:
Diffstat (limited to 'src/dev/stordev/removablestordev.cil')
-rw-r--r--src/dev/stordev/removablestordev.cil17
1 files changed, 17 insertions, 0 deletions
diff --git a/src/dev/stordev/removablestordev.cil b/src/dev/stordev/removablestordev.cil
new file mode 100644
index 0000000..36e8a93
--- /dev/null
+++ b/src/dev/stordev/removablestordev.cil
@@ -0,0 +1,17 @@
+;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-License-Identifier: Unlicense
+
+(block removable
+
+ (filecon "/dev/fd[^/]+" block stordev_context)
+ (filecon "/dev/mmcblk[0-9]+" block stordev_context)
+ (filecon "/dev/mmcblk[0-9]boot[^/]+" block stordev_context)
+ (filecon "/dev/mmcblk[0-9]p[^/]+" block stordev_context)
+ (filecon "/dev/mmcblk[0-9]rpmb" char stordev_context)
+ (filecon "/dev/mspblk[0-9]+" block stordev_context)
+ (filecon "/dev/mspblk[0-9]boot[^/]+" block stordev_context)
+ (filecon "/dev/mspblk[0-9]p[^/]+" block stordev_context)
+ (filecon "/dev/mspblk[0-9]rpmb" char stordev_context)
+ (filecon "/dev/sr[0-9]+" block stordev_context)
+
+ (blockinherit .stordev.template))