aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <chpebeni@linux.microsoft.com>2019-05-31 13:44:49 -0400
committerJason Zaman <jason@perfinion.com>2019-07-13 14:43:14 +0800
commit86a0e854927db91b4a978fe92a63e3edb5256927 (patch)
tree1138809fc8ed7179381ef1182cef2e772668d39b
parentstorage: Add fc entry for /dev/pmem* (diff)
downloadhardened-refpolicy-86a0e854927db91b4a978fe92a63e3edb5256927.tar.gz
hardened-refpolicy-86a0e854927db91b4a978fe92a63e3edb5256927.tar.bz2
hardened-refpolicy-86a0e854927db91b4a978fe92a63e3edb5256927.zip
devices: Add type for /dev/daxX.Y.
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com> Signed-off-by: Jason Zaman <jason@perfinion.com>
-rw-r--r--policy/modules/kernel/devices.fc1
-rw-r--r--policy/modules/kernel/devices.te6
2 files changed, 7 insertions, 0 deletions
diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc
index 3b9be43f..bdff6b1a 100644
--- a/policy/modules/kernel/devices.fc
+++ b/policy/modules/kernel/devices.fc
@@ -21,6 +21,7 @@
/dev/controlD64 -c gen_context(system_u:object_r:xserver_misc_device_t,s0)
/dev/crash -c gen_context(system_u:object_r:crash_device_t,mls_systemhigh)
/dev/dahdi/.* -c gen_context(system_u:object_r:sound_device_t,s0)
+/dev/dax[0-9]\.[0-9] -c gen_context(system_u:object_r:dax_device_t,mls_systemhigh)
/dev/dmfm -c gen_context(system_u:object_r:sound_device_t,s0)
/dev/dmmidi.* -c gen_context(system_u:object_r:sound_device_t,s0)
/dev/dsp.* -c gen_context(system_u:object_r:sound_device_t,s0)
diff --git a/policy/modules/kernel/devices.te b/policy/modules/kernel/devices.te
index a0331212..88a4246e 100644
--- a/policy/modules/kernel/devices.te
+++ b/policy/modules/kernel/devices.te
@@ -83,6 +83,12 @@ type crypt_device_t;
dev_node(crypt_device_t)
#
+# Type for /dev/dax*.*
+#
+type dax_device_t;
+dev_node(dax_device_t)
+
+#
# dlm_misc_device_t is the type of /dev/misc/dlm.*
#
type dlm_control_device_t;