blob: e6340a35628e782d3fa5327b5f1e3d91911fc508 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(sidcontext devnull (sys.id sys.role null.nodedev lowlevelrange))
(block null
(filecon "/dev/full" char nodedev_context)
(filecon "/dev/null" char nodedev_context)
(blockinherit .nodedev.template)
(call .rbacsep.exempt.obj.type (nodedev)))
|
