commit: 419815b880c47346496b204e90499ace61984606 Author: Kenton Groombridge <me <AT> concord <DOT> sh> AuthorDate: Mon Nov 1 17:01:43 2021 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Thu Nov 11 21:26:50 2021 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=419815b8
devices: make usbfs pseudofs instead of noxattrfs Signed-off-by: Kenton Groombridge <me <AT> concord.sh> Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org> policy/modules/kernel/devices.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/kernel/devices.te b/policy/modules/kernel/devices.te index 56783d53..5a06ea82 100644 --- a/policy/modules/kernel/devices.te +++ b/policy/modules/kernel/devices.te @@ -306,7 +306,7 @@ dev_node(urandom_device_t) # type usbfs_t; files_mountpoint(usbfs_t) -fs_noxattr_type(usbfs_t) +fs_pseudo_type(usbfs_t) genfscon usbfs / gen_context(system_u:object_r:usbfs_t,s0) genfscon usbdevfs / gen_context(system_u:object_r:usbfs_t,s0)
