Add new labels for content under /sys/

[people/stevee/selinux-policy.git] / policy / modules / kernel / devices.fc

diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc
index 26c13f295b27105bcfc8f4154e6b2415145d3378..2354089fe6eff2cd1f33cda7dbcfb4fce2eab1a0 100644 (file)
--- a/policy/modules/kernel/devices.fc
+++ b/policy/modules/kernel/devices.fc
@@ -205,6 +205,7 @@ ifdef(`distro_redhat',`
 # /sys
 #
 /sys(/.*)?                     gen_context(system_u:object_r:sysfs_t,s0)
+/sys/devices/system/cpu/online gen_context(system_u:object_r:cpu_online_t,s0)
 
 /usr/lib/udev/devices(/.*)?            gen_context(system_u:object_r:device_t,s0)
 /usr/lib/udev/devices/lp.*     -c      gen_context(system_u:object_r:printer_device_t,s0)