blob: c11816cdca4fa9e5c7db6f41230daf87452b333b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
;; SPDX-FileCopyrightText: © 2024 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(sidcontext devnull (sys.id sys.role null.nodedev lowlevelrange))
(block null
(filecon "/dev/full" char nodedev_context)
(filecon "/dev/null" char nodedev_context)
(blockinherit .nodedev.template)
(call .rbacsep.exempt.obj.type (nodedev)))
|
