commit: de0bc389501c938e7a739a6dc4c9812f8412f715
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Sun Feb 18 13:19:26 2018 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Sun Mar 25 09:30:24 2018 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=de0bc389
udisks2 and /dev/mem version 2 patch from Russell Coker.
policy/modules/contrib/devicekit.te | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/policy/modules/contrib/devicekit.te
b/policy/modules/contrib/devicekit.te
index 390564a3..27e0dae0 100644
--- a/policy/modules/contrib/devicekit.te
+++ b/policy/modules/contrib/devicekit.te
@@ -1,4 +1,4 @@
-policy_module(devicekit, 1.8.1)
+policy_module(devicekit, 1.8.2)
########################################
#
@@ -151,6 +151,11 @@ miscfiles_read_localization(devicekit_disk_t)
userdom_read_all_users_state(devicekit_disk_t)
userdom_search_user_home_dirs(devicekit_disk_t)
+ifdef(`distro_debian',`
+ # /dev/mem is accessed by libparted to get EFI data
+ dev_read_raw_memory(devicekit_disk_t)
+')
+
optional_policy(`
dbus_system_bus_client(devicekit_disk_t)
