From: anthony.perard@citrix.com (Anthony PERARD) Date: Fri, 28 Jul 2017 15:16:18 +0100 Subject: [refpolicy] [SELINUX POLICY PATCH] Update for Xen 4.7 Message-ID: <20170728141618.32175-1-anthony.perard@citrix.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Since Xen 4.7, /dev/xen/privcmd is used instead of /proc/xen/privcmd. Add the device into the policy so `xenstored` can work. Signed-off-by: Anthony PERARD --- policy/modules/kernel/devices.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc index e3a5ebc9..f4093434 100644 --- a/policy/modules/kernel/devices.fc +++ b/policy/modules/kernel/devices.fc @@ -182,6 +182,7 @@ ifdef(`distro_suse', ` /dev/xen/evtchn -c gen_context(system_u:object_r:xen_device_t,s0) /dev/xen/gntdev -c gen_context(system_u:object_r:xen_device_t,s0) /dev/xen/gntalloc -c gen_context(system_u:object_r:xen_device_t,s0) +/dev/xen/privcmd -c gen_context(system_u:object_r:xen_device_t,s0) ifdef(`distro_debian',` # this is a static /dev dir "backup mount" -- Anthony PERARD