--- policy-1.15.11/domains/program/unused/rpm.te~ 2004-07-31 06:22:37.000000000 -0400 +++ policy-1.15.11/domains/program/unused/rpm.te 2004-08-04 11:20:40.165411688 -0400 @@ -90,9 +90,9 @@ general_domain_access(rpm_script_t) # read/write/create any files in the system -allow rpm_t { file_type - shadow_t }:{ file lnk_file dir fifo_file sock_file chr_file blk_file } { relabelfrom relabelto }; -allow rpm_t { file_type - shadow_t }:dir create_dir_perms; -allow rpm_t { file_type - shadow_t }:{ file lnk_file fifo_file sock_file chr_file blk_file } create_file_perms; +allow rpm_t { file_type device_type -shadow_t }:{ file lnk_file dir fifo_file sock_file chr_file blk_file } { relabelfrom relabelto }; +allow rpm_t { file_type device_type - shadow_t }:dir create_dir_perms; +allow rpm_t { file_type device_type - shadow_t }:{ file lnk_file fifo_file sock_file chr_file blk_file } create_file_perms; allow rpm_t sysfs_t:filesystem getattr; allow rpm_t tmpfs_t:filesystem getattr; dontaudit rpm_t domain:{ socket unix_dgram_socket udp_socket unix_stream_socket tcp_socket fifo_file rawip_socket packet_socket } getattr;