From: guido@trentalancia.net (Guido Trentalancia) Date: Sun, 14 Aug 2016 00:05:26 +0200 (CEST) Subject: [refpolicy] [PATCH v2] Cpucontrol should be able to search firmware directories In-Reply-To: <1470675545.2909.3.camel@trentalancia.net> References: <1470675545.2909.3.camel@trentalancia.net> Message-ID: <975120307.942739.1471125926812.JavaMail.open-xchange@popper02.register.it> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Cpucontrol should be able to search /lib dirs for microcode data files. Signed-off-by: Guido Trentalancia --- policy/modules/contrib/cpucontrol.te | 3 +++ 1 file changed, 3 insertions(+) --- refpolicy-git-06082016-orig/policy/modules/contrib/cpucontrol.te 2016-08-06 21:56:16.079262965 +0200 +++ refpolicy-git-06082016/policy/modules/contrib/cpucontrol.te 2016-08-13 23:36:22.235497464 +0200 @@ -78,6 +79,8 @@ kernel_read_proc_symlinks(cpucontrol_t) dev_read_sysfs(cpucontrol_t) dev_rw_cpu_microcode(cpucontrol_t) +libs_search_lib(cpucontrol_t) + optional_policy(` rhgb_use_ptys(cpucontrol_t) ')