From mboxrd@z Thu Jan 1 00:00:00 1970 From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Tue, 30 Oct 2012 16:00:37 -0400 Subject: [refpolicy] [PATCH 10/10] For virtd In-Reply-To: <1351622384-24790-1-git-send-email-dominick.grift@gmail.com> References: <1351622384-24790-1-git-send-email-dominick.grift@gmail.com> Message-ID: <509031E5.40203@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 10/30/12 14:39, Dominick Grift wrote: > Signed-off-by: Dominick Grift > --- > policy/modules/kernel/devices.if | 18 ++++++++++++++++++ > 1 files changed, 18 insertions(+), 0 deletions(-) > > diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if > index e59415f..9b9c067 100644 > --- a/policy/modules/kernel/devices.if > +++ b/policy/modules/kernel/devices.if > @@ -4167,6 +4167,24 @@ interface(`dev_read_generic_usb_dev',` > > ######################################## > ## > +## Relabel generic the USB devices. > +## > +## > +## > +## Domain allowed access. > +## > +## > +# > +interface(`dev_relabel_generic_usb_dev',` > + gen_require(` > + type usb_device_t; > + ') > + > + relabel_chr_files_pattern($1, device_t, usb_device_t) > +') > + > +######################################## > +## > ## Read and write generic the USB devices. > ## > ## Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com