From: guido@trentalancia.com (Guido Trentalancia) Date: Wed, 21 Jun 2017 19:01:30 +0200 Subject: [refpolicy] [PATCH] userdomain: rename USB write boolean In-Reply-To: <20170621183454.40c50dab@vega.skynet.aixah.de> References: <1498058933.4583.3.camel@trentalancia.com> <20170621182333.2daefc16@vega.skynet.aixah.de> <1498062309.4583.5.camel@trentalancia.com> <20170621183454.40c50dab@vega.skynet.aixah.de> Message-ID: <1498064490.4583.6.camel@trentalancia.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Yes, you are right ! Please drop this patch then !! It is misplaced... Regards, Guido On Wed, 21/06/2017 at 18.34 +0200, Luis Ressel wrote: > On Wed, 21 Jun 2017 18:25:09 +0200 > Guido Trentalancia via refpolicy wrote: > > > The interface that is called enables writing to USB devices and > > nothing else. > > No. userdomain.te calls two interfaces when this > boolean is enabled: > storage_raw_write_removable_device (writing to > removable_t block devices), and dev_rw_generic_usb_dev (writing to > usb_device_t char devices). > > Cheers, > Luis