;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(sidcontext devnull (sys.id sys.role null.nodedev lowlevelrange))

(block null

  (filecon "/dev/full" char nodedev_context)
  (filecon "/dev/null" char nodedev_context)

  (blockinherit .nodedev.template)

  (call .rbacsep.exempt.obj.type (nodedev)))