aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <Christopher.PeBenito@microsoft.com>2022-05-02 15:42:15 +0000
committerJason Zaman <perfinion@gentoo.org>2022-09-03 11:41:55 -0700
commitb025eb9597251a6a12c599ce0cf2d13dbab4f31f (patch)
tree8c91e41fe4e2ef7b3e02d89c0b3b5937114deb4f
parentdevices: Add type for SAS management devices. (diff)
downloadhardened-refpolicy-b025eb9597251a6a12c599ce0cf2d13dbab4f31f.tar.gz
hardened-refpolicy-b025eb9597251a6a12c599ce0cf2d13dbab4f31f.tar.bz2
hardened-refpolicy-b025eb9597251a6a12c599ce0cf2d13dbab4f31f.zip
devices: Add file context for /dev/vhost-vsock.
Signed-off-by: Chris PeBenito <Christopher.PeBenito@microsoft.com> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
-rw-r--r--policy/modules/kernel/devices.fc1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc
index bd0977e3..7fa4a971 100644
--- a/policy/modules/kernel/devices.fc
+++ b/policy/modules/kernel/devices.fc
@@ -138,6 +138,7 @@ ifdef(`distro_suse', `
/dev/vhci -c gen_context(system_u:object_r:vhost_device_t,s0)
/dev/vhost-net -c gen_context(system_u:object_r:vhost_device_t,s0)
/dev/vhost-scsi -c gen_context(system_u:object_r:vhost_device_t,s0)
+/dev/vhost-vsock -c gen_context(system_u:object_r:vhost_device_t,s0)
/dev/video.* -c gen_context(system_u:object_r:v4l_device_t,s0)
/dev/vmmon -c gen_context(system_u:object_r:vmware_device_t,s0)
/dev/vmnet.* -c gen_context(system_u:object_r:vmware_device_t,s0)