From be42ee14486f2c39c7a7f0b9c517a4efd37468ac Mon Sep 17 00:00:00 2001 From: John Turner Date: Sat, 23 Aug 2025 20:27:09 -0400 Subject: move "fuse" out of misc.cil --- src/dev/stordev/fusestordev.cil | 8 +++++--- src/misc.cil | 5 ----- 2 files changed, 5 insertions(+), 8 deletions(-) diff --git a/src/dev/stordev/fusestordev.cil b/src/dev/stordev/fusestordev.cil index 2430c62..ea6f761 100644 --- a/src/dev/stordev/fusestordev.cil +++ b/src/dev/stordev/fusestordev.cil @@ -1,11 +1,13 @@ ;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift ;; SPDX-License-Identifier: Unlicense -(block fuse - - (filecon "/dev/fuse" char stordev_context) +(block fuse (blockinherit .stordev.base_template) (blockinherit .stordev.macro_template_chr_files) + (filecon "/dev/fuse" char stordev_context) + (filecon "/sys/fs/fuse/connections" dir ()) + (filecon "/sys/fs/fuse/connections/.*" any ()) + (call .rbacsep.exempt.obj.type (stordev))) diff --git a/src/misc.cil b/src/misc.cil index 1dde37f..4c069ef 100644 --- a/src/misc.cil +++ b/src/misc.cil @@ -3,11 +3,6 @@ (sidcontext init (sys.id sys.role sys.subj sys.lowlow)) ;; userspace_initial_context -(in fuse - - (filecon "/sys/fs/fuse/connections" dir ()) - (filecon "/sys/fs/fuse/connections/.*" any ())) - (in home (filecon "/home" dir file_context) -- cgit v1.2.3