From cceecdf58585eb6119ef2493be1326e5c3551da2 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sat, 21 Dec 2024 19:32:21 +0100 Subject: iouringav: fix dev.unconfined Signed-off-by: Dominick Grift --- src/misc/av/iouringav.cil | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/src/misc/av/iouringav.cil b/src/misc/av/iouringav.cil index 8656573..e7a398d 100644 --- a/src/misc/av/iouringav.cil +++ b/src/misc/av/iouringav.cil @@ -20,10 +20,6 @@ (allow typeattr debugfile.typeattr (io_uring (cmd)))) -(in dev.unconfined - - (allow typeattr dev.typeattr (io_uring (cmd)))) - (in file.unconfined (allow typeattr file.typeattr (io_uring (cmd)))) @@ -54,6 +50,10 @@ (allow typeattr pstorefile.typeattr (io_uring (cmd)))) +(in ptytermdev.unconfined + + (allow typeattr ptytermdev.typeattr (io_uring (cmd)))) + (in rbacsep (constrain (io_uring (override_creds)) @@ -68,6 +68,10 @@ (allow typeattr securityfile.typeattr (io_uring (cmd)))) +(in serialtermdev.unconfined + + (allow typeattr serialtermdev.typeattr (io_uring (cmd)))) + (in stordev.unconfined (allow typeattr stordev.typeattr (io_uring (cmd)))) @@ -85,10 +89,6 @@ (allow typeattr sysfile.typeattr (io_uring (cmd)))) -(in termdev.unconfined - - (allow typeattr termdev.typeattr (io_uring (cmd)))) - (in tracefile.unconfined (allow typeattr tracefile.typeattr (io_uring (cmd)))) -- cgit v1.2.3