From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 05 Mar 2009 10:59:44 -0500
Subject: [refpolicy] kernel_devices.patch
In-Reply-To: <49AEF360.2060204@redhat.com>
References: <49AEF360.2060204@redhat.com>
Message-ID: <1236268784.26944.103.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Wed, 2009-03-04 at 16:32 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/kernel_devices.patch
> 
> 
> labels for
> 
> /dev/3dfx
> /dev/autofs
> /dev/gfx
> /dev/graphics
> ...
> 
> 
> Java wants to attempt to append to the rand device.  Dontaudit for now
> 
> interface to manage device_t directories
> 
> interfaces to handle new null devices
> usb devices
> 
> kvm

Merged with a bunch of reorganization.

Is this right?

+/dev/bometric/sensor.*	-c gen_context(system_u:object_r:event_device_t,s0)

should it be /dev/biometric instead of /dev/bometric?

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150