From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Fri, 8 Aug 2014 14:33:21 +0200 Subject: [refpolicy] [PATCH 4/5] Introduce kernel_delete_unlabeled_blk_files In-Reply-To: <1407501202-14908-1-git-send-email-sven.vermeulen@siphos.be> References: <1407501202-14908-1-git-send-email-sven.vermeulen@siphos.be> Message-ID: <1407501202-14908-5-git-send-email-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com The kernel_delete_unlabeled_blk_files interface is called by the (deprecated) files_delete_isid_type_blk_files in kernel/files.if. Signed-off-by: Sven Vermeulen --- policy/modules/kernel/kernel.if | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if index 13635c9..a8f71ff 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -2668,6 +2668,24 @@ interface(`kernel_rw_unlabeled_blk_files',` ######################################## ## +## Delete unlabeled block device nodes. +## +## +## +## Domain allowed access. +## +## +# +interface(`kernel_delete_unlabeled_blk_files',` + gen_require(` + type unlabeled_t; + ') + + delete_blk_files_pattern($1, unlabeled_t, unlabeled_t) +') + +######################################## +## ## Create, read, write, and delete unlabeled block device nodes. ## ## -- 1.8.5.5