commit:     5ff9a8876e58544ab99a22441e272dcb94b0525b
Author:     Chris PeBenito <chpebeni <AT> linux <DOT> microsoft <DOT> com>
AuthorDate: Fri May 31 17:42:42 2019 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Jul 13 06:43:14 2019 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5ff9a887

storage: Add fc entry for /dev/pmem*

Signed-off-by: Chris PeBenito <chpebeni <AT> linux.microsoft.com>
Signed-off-by: Jason Zaman <jason <AT> perfinion.com>

 policy/modules/kernel/storage.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/storage.fc b/policy/modules/kernel/storage.fc
index 926327bd..b6dfcd9f 100644
--- a/policy/modules/kernel/storage.fc
+++ b/policy/modules/kernel/storage.fc
@@ -41,6 +41,7 @@
 /dev/pcd[0-3]          -b      
gen_context(system_u:object_r:removable_device_t,s0)
 /dev/pd[a-d][^/]*      -b      
gen_context(system_u:object_r:removable_device_t,s0)
 /dev/pg[0-3]           -c      
gen_context(system_u:object_r:removable_device_t,s0)
+/dev/pmem[0-9]*                -b      
gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
 /dev/ps3d.*            -b      
gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
 /dev/ram.*             -b      
gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
 /dev/(raw/)?rawctl     -c      
gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)

Reply via email to