From: aranea@aixah.de (Luis Ressel)
Date: Wed, 21 Jun 2017 18:34:54 +0200
Subject: [refpolicy] [PATCH] userdomain: rename USB write boolean
In-Reply-To: <1498062309.4583.5.camel@trentalancia.com>
References: <1498058933.4583.3.camel@trentalancia.com>
	<20170621182333.2daefc16@vega.skynet.aixah.de>
	<1498062309.4583.5.camel@trentalancia.com>
Message-ID: <20170621183454.40c50dab@vega.skynet.aixah.de>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Wed, 21 Jun 2017 18:25:09 +0200
Guido Trentalancia via refpolicy <refpolicy@oss.tresys.com> wrote:

> The interface that is called enables writing to USB devices and
> nothing else.

No. userdomain.te calls two interfaces when this
boolean is enabled:
storage_raw_write_removable_device (writing to
removable_t block devices), and dev_rw_generic_usb_dev (writing to
usb_device_t char devices).

Cheers,
Luis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20170621/937c1122/attachment.bin