src/dev/nodedev/vfionodedev.cil


1
2
3
4
5
6
7
8
9
10

;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(block vfio

  (filecon "/dev/vfio/.+" char nodedev_context)

  (blockinherit .nodedev.template)

  (call .rbacsep.exempt.obj.type (nodedev)))