aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <pebenito@ieee.org>2018-02-18 08:19:26 -0500
committerSven Vermeulen <swift@gentoo.org>2018-03-25 11:30:24 +0200
commitde0bc389501c938e7a739a6dc4c9812f8412f715 (patch)
tree3bfe4c4c902d1e2838c54283fcaa2e6e68e425b3
parentMerge upstream (diff)
downloadhardened-refpolicy-de0bc389501c938e7a739a6dc4c9812f8412f715.tar.gz
hardened-refpolicy-de0bc389501c938e7a739a6dc4c9812f8412f715.tar.bz2
hardened-refpolicy-de0bc389501c938e7a739a6dc4c9812f8412f715.zip
udisks2 and /dev/mem version 2 patch from Russell Coker.
-rw-r--r--policy/modules/contrib/devicekit.te7
1 files changed, 6 insertions, 1 deletions
diff --git a/policy/modules/contrib/devicekit.te b/policy/modules/contrib/devicekit.te
index 390564a3..27e0dae0 100644
--- a/policy/modules/contrib/devicekit.te
+++ b/policy/modules/contrib/devicekit.te
@@ -1,4 +1,4 @@
-policy_module(devicekit, 1.8.1)
+policy_module(devicekit, 1.8.2)
########################################
#
@@ -151,6 +151,11 @@ miscfiles_read_localization(devicekit_disk_t)
userdom_read_all_users_state(devicekit_disk_t)
userdom_search_user_home_dirs(devicekit_disk_t)
+ifdef(`distro_debian',`
+ # /dev/mem is accessed by libparted to get EFI data
+ dev_read_raw_memory(devicekit_disk_t)
+')
+
optional_policy(`
dbus_system_bus_client(devicekit_disk_t)