From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Wed, 06 Oct 2010 08:42:38 -0400 Subject: [refpolicy] [ patch 10/44] consoletype: in fedora13 /dev/console is not labeled properly early in the boot process. In-Reply-To: <1286216636-28449-12-git-send-email-domg472@gmail.com> References: <1286216636-28449-1-git-send-email-domg472@gmail.com> <1286216636-28449-12-git-send-email-domg472@gmail.com> Message-ID: <4CAC6EBE.6050607@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 10/04/10 14:23, Dominick Grift wrote: > > Signed-off-by: Dominick Grift Merged. > :100644 100644 38987f3... f0ad9f4... M policy/modules/admin/consoletype.te > policy/modules/admin/consoletype.te | 2 ++ > 1 files changed, 2 insertions(+), 0 deletions(-) > > diff --git a/policy/modules/admin/consoletype.te b/policy/modules/admin/consoletype.te > index 38987f3..f0ad9f4 100644 > --- a/policy/modules/admin/consoletype.te > +++ b/policy/modules/admin/consoletype.te > @@ -48,6 +48,8 @@ init_use_script_ptys(consoletype_t) > init_use_script_fds(consoletype_t) > init_rw_script_pipes(consoletype_t) > > +dev_dontaudit_rw_generic_chr_files(consoletype_t) > + > domain_use_interactive_fds(consoletype_t) > > files_dontaudit_read_root_files(consoletype_t) -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com