* [refpolicy] [PATCH] udisks2 and /dev/mem version 2
@ 2018-02-16 10:06 Russell Coker
2018-02-18 16:14 ` Chris PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Russell Coker @ 2018-02-16 10:06 UTC (permalink / raw)
To: refpolicy
Second version of this patch, it doesn't need execute access.
Index: refpolicy-2.20180216/policy/modules/contrib/devicekit.te
===================================================================
--- refpolicy-2.20180216.orig/policy/modules/contrib/devicekit.te
+++ refpolicy-2.20180216/policy/modules/contrib/devicekit.te
@@ -109,6 +109,8 @@ dev_getattr_usbfs_dirs(devicekit_disk_t)
dev_manage_generic_files(devicekit_disk_t)
dev_read_urand(devicekit_disk_t)
dev_rw_sysfs(devicekit_disk_t)
+# /dev/mem is accessed by libparted to get EFI data
+dev_read_raw_memory(devicekit_disk_t)
domain_getattr_all_pipes(devicekit_disk_t)
domain_getattr_all_sockets(devicekit_disk_t)
^ permalink raw reply [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH] udisks2 and /dev/mem version 2
2018-02-16 10:06 [refpolicy] [PATCH] udisks2 and /dev/mem version 2 Russell Coker
@ 2018-02-18 16:14 ` Chris PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Chris PeBenito @ 2018-02-18 16:14 UTC (permalink / raw)
To: refpolicy
On 02/16/2018 05:06 AM, Russell Coker via refpolicy wrote:
> Second version of this patch, it doesn't need execute access.
>
> Index: refpolicy-2.20180216/policy/modules/contrib/devicekit.te
> ===================================================================
> --- refpolicy-2.20180216.orig/policy/modules/contrib/devicekit.te
> +++ refpolicy-2.20180216/policy/modules/contrib/devicekit.te
> @@ -109,6 +109,8 @@ dev_getattr_usbfs_dirs(devicekit_disk_t)
> dev_manage_generic_files(devicekit_disk_t)
> dev_read_urand(devicekit_disk_t)
> dev_rw_sysfs(devicekit_disk_t)
> +# /dev/mem is accessed by libparted to get EFI data
> +dev_read_raw_memory(devicekit_disk_t)
>
> domain_getattr_all_pipes(devicekit_disk_t)
> domain_getattr_all_sockets(devicekit_disk_t)
Merged, though based on the discussion about the code, I moved it to a
distro_debian block.
--
Chris PeBenito
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2018-02-18 16:14 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-02-16 10:06 [refpolicy] [PATCH] udisks2 and /dev/mem version 2 Russell Coker
2018-02-18 16:14 ` Chris PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.