From: dwalsh@redhat.com (Daniel J Walsh)
Date: Thu, 05 Mar 2009 12:27:22 -0500
Subject: [refpolicy] kernel_devices.patch
In-Reply-To: <1236268784.26944.103.camel@gorn.columbia.tresys.com>
References: <49AEF360.2060204@redhat.com>
	<1236268784.26944.103.camel@gorn.columbia.tresys.com>
Message-ID: <49B00B7A.1080106@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christopher J. PeBenito wrote:
> On Wed, 2009-03-04 at 16:32 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/kernel_devices.patch
>>
>>
>> labels for
>>
>> /dev/3dfx
>> /dev/autofs
>> /dev/gfx
>> /dev/graphics
>> ...
>>
>>
>> Java wants to attempt to append to the rand device.  Dontaudit for now
>>
>> interface to manage device_t directories
>>
>> interfaces to handle new null devices
>> usb devices
>>
>> kvm
> 
> Merged with a bunch of reorganization.
> 
> Is this right?
> 
> +/dev/bometric/sensor.*	-c gen_context(system_u:object_r:event_device_t,s0)
> 
> should it be /dev/biometric instead of /dev/bometric?
> 
Yes that is a bug.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmwC3oACgkQrlYvE4MpobMBegCfVnXHv1NkzDitODwITaCWnspV
yF4AoIlwB7F2WdDP2f4KUEkcCnolJFom
=uvPy
-----END PGP SIGNATURE-----