From 9e3b629af3c95ed367778047316af116ef49bbb3 Mon Sep 17 00:00:00 2001 From: John Turner Date: Sat, 23 Aug 2025 20:31:02 -0400 Subject: move "hugetlb" out of misc.cil --- src/fs/seclabelfs/hugetlbseclabelfs.cil | 7 ++++++- src/misc.cil | 7 ------- 2 files changed, 6 insertions(+), 8 deletions(-) diff --git a/src/fs/seclabelfs/hugetlbseclabelfs.cil b/src/fs/seclabelfs/hugetlbseclabelfs.cil index 81f7a86..1ddd0d3 100644 --- a/src/fs/seclabelfs/hugetlbseclabelfs.cil +++ b/src/fs/seclabelfs/hugetlbseclabelfs.cil @@ -7,4 +7,9 @@ (blockinherit .fs.macro_template_dirs) (blockinherit .fs.macro_template_files) - (blockinherit .seclabelfs.template)) + (blockinherit .seclabelfs.template) + + (filecon "/dev/hugepages" dir ()) + (filecon "/dev/hugepages/.*" any ()) + + (allow fs self (filesystem (associate)))) diff --git a/src/misc.cil b/src/misc.cil index a543f57..5b1c52a 100644 --- a/src/misc.cil +++ b/src/misc.cil @@ -3,13 +3,6 @@ (sidcontext init (sys.id sys.role sys.subj sys.lowlow)) ;; userspace_initial_context -(in hugetlb - - (filecon "/dev/hugepages" dir ()) - (filecon "/dev/hugepages/.*" any ()) - - (allow fs self (filesystem (associate)))) - (in lib (filecon "/usr/lib" dir file_context) -- cgit v1.2.3