blob: 16b913e1c03bb1b1e22d578e74cf89ea412bd3f7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(sidcontext devnull (sys.id sys.role null.nodedev sys.lowlow))
(block null
(filecon "/dev/full" char nodedev_context)
(filecon "/dev/null" char nodedev_context)
(blockinherit .nodedev.template)
(call .rbacsep.exempt.obj.type (nodedev)))
|