src/dev/nodedev/vfionodedev.cil


1
2
3
4
5
6
7
8
9
10

;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(block vfio

    (filecon "/dev/vfio/.+" char nodedev_context)

    (blockinherit .nodedev.template)

    (call .rbacsep.exempt.obj.type (nodedev)))