diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if index c1cf30b..dec0e02 100644 --- a/policy/modules/kernel/devices.if +++ b/policy/modules/kernel/devices.if @@ -1211,6 +1211,27 @@ interface(`dev_dontaudit_rw_cardmgr',` ######################################## ## ## Create, read, write, and delete +## the PCMCIA card manager device +## with the correct type. +## +## +## +## Domain allowed access. +## +## +# +interface(`dev_create_cardmgr_dev',` + gen_require(` + type device_t, cardmgr_dev_t; + ') + + create_chr_files_pattern($1, device_t, cardmgr_dev_t) + create_blk_files_pattern($1, device_t, cardmgr_dev_t) +') + +######################################## +## +## Create, read, write, and delete ## the PCMCIA card manager device. ## ## @@ -1230,9 +1251,9 @@ interface(`dev_manage_cardmgr_dev',` ######################################## ## -## Create, read, write, and delete -## the PCMCIA card manager device -## with the correct type. +## Automatic type transition to the type +## for PCMCIA card manager device nodes when +## created in /dev. ## ## ## @@ -1240,13 +1261,11 @@ interface(`dev_manage_cardmgr_dev',` ## ## # -interface(`dev_create_cardmgr_dev',` +interface(`dev_filetrans_cardmgr',` gen_require(` type device_t, cardmgr_dev_t; ') - create_chr_files_pattern($1, device_t, cardmgr_dev_t) - create_blk_files_pattern($1, device_t, cardmgr_dev_t) filetrans_pattern($1, device_t, cardmgr_dev_t, { chr_file blk_file }) ') diff --git a/policy/modules/kernel/devices.te b/policy/modules/kernel/devices.te index 6c2f05d..c37a400 100644 --- a/policy/modules/kernel/devices.te +++ b/policy/modules/kernel/devices.te @@ -1,5 +1,5 @@ -policy_module(devices, 1.8.1) +policy_module(devices, 1.8.2) ######################################## # diff --git a/policy/modules/system/pcmcia.te b/policy/modules/system/pcmcia.te index d17a662..9556bde 100644 --- a/policy/modules/system/pcmcia.te +++ b/policy/modules/system/pcmcia.te @@ -55,7 +55,7 @@ corecmd_exec_all_executables(cardmgr_t) dev_read_sysfs(cardmgr_t) dev_manage_cardmgr_dev(cardmgr_t) -dev_create_cardmgr_dev(cardmgr_t) +dev_filetrans_cardmgr(cardmgr_t) dev_getattr_all_chr_files(cardmgr_t) dev_getattr_all_blk_files(cardmgr_t) # for SSP