From d51ea05efd323c8caffc814713e73bba5bc55141 Mon Sep 17 00:00:00 2001 From: John Turner Date: Sat, 23 Aug 2025 20:26:13 -0400 Subject: move "fs.unconfined" out of misc.cil --- src/fs.cil | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'src/fs.cil') diff --git a/src/fs.cil b/src/fs.cil index 79f09d9..3d78e49 100644 --- a/src/fs.cil +++ b/src/fs.cil @@ -569,7 +569,6 @@ (blockinherit .fs.macro_template_fs)) (block unconfined - (macro type ((type ARG1)) (typeattributeset typeattr ARG1)) @@ -586,7 +585,12 @@ (allow typeattr fs.typeattr (lnk_file (not (audit_access execmod map mounton)))) (allow typeattr fs.typeattr - (sock_file (not (audit_access execmod map mounton)))))) + (sock_file (not (audit_access execmod map mounton)))) + + (call .dos.boot_file_type_transition_fs (typeattr)) + (call .dos.root_file_type_transition_fs (typeattr)) + (call .proc.root_file_type_transition_fs (typeattr)) + (call .sys.root_file_type_transition_fs (typeattr)))) (in invalid.unconfined -- cgit v1.2.3