Fix procs_type interface

diff --git a/policy/modules/kernel/files.te b/policy/modules/kernel/files.te
index 4e8d59439c4a51296f8f088c337a1c3d88abc18e..4486d8050336d9f9325f972024a465b05679f2c2 100644 (file)
--- a/policy/modules/kernel/files.te
+++ b/policy/modules/kernel/files.te
@@ -144,7 +144,7 @@ files_mountpoint(src_t)
 #
 type system_map_t;
 files_type(system_map_t)
-procs_type(system_map_t)
+kernel_proc_type(system_map_t)
 genfscon proc /kallsyms gen_context(system_u:object_r:system_map_t,s0)
 
 #

diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if
index 4845190e0bdbf76158786ba5e2c23596dbeee5af..34c68970094f89f2392eb326cbc312aa3caa8245 100644 (file)
--- a/policy/modules/kernel/kernel.if
+++ b/policy/modules/kernel/kernel.if
@@ -3089,9 +3089,9 @@ interface(`kernel_stream_connect',`
 ##     </summary>
 ## </param>
 #
-interface(`procs_type',`
+interface(`kernel_proc_type',`
        gen_require(`
-               attribute proc_type
+               attribute proc_type;
        ')
 
        typeattribute $1 proc_type;

diff --git a/policy/modules/services/virt.te b/policy/modules/services/virt.te
index 30c47b07263e4c2cb70c13d9cd1e87f593752e8d..59444bad0854f6f72121dec642a81d5b09b02e41 100644 (file)
--- a/policy/modules/services/virt.te
+++ b/policy/modules/services/virt.te
@@ -955,6 +955,7 @@ kernel_read_network_state(svirt_lxc_net_t)
 
 domain_entry_file(svirt_lxc_net_t, svirt_lxc_file_t)
 domtrans_pattern(virtd_lxc_t, svirt_lxc_file_t, svirt_lxc_net_t)
+corecmd_shell_domtrans(virtd_lxc_t, svirt_lxc_net_t)
 fs_noxattr_type(svirt_lxc_file_t)
 term_pty(svirt_lxc_file_t)