From 7763bf0adfa9dad75faaf28b880dc894f88ef8f9 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Thu, 3 Nov 2011 11:24:47 -0400 Subject: [PATCH] megadev should be a fixed_disk, not a removable disk. megadev0 is the SCSI board where all the local hard drives are connected. --- policy/modules/kernel/storage.fc | 2 +- policy/modules/kernel/storage.if | 20 ++++++++++---------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/policy/modules/kernel/storage.fc b/policy/modules/kernel/storage.fc index 57c4a6ac..5e2a7de0 100644 --- a/policy/modules/kernel/storage.fc +++ b/policy/modules/kernel/storage.fc @@ -28,7 +28,7 @@ /dev/loop.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) /dev/lvm -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) /dev/mcdx? -b gen_context(system_u:object_r:removable_device_t,s0) -/dev/megadev.* -c gen_context(system_u:object_r:removable_device_t,s0) +/dev/megadev.* -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) /dev/mmcblk.* -b gen_context(system_u:object_r:removable_device_t,s0) /dev/mspblk.* -b gen_context(system_u:object_r:removable_device_t,s0) /dev/mtd.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh) diff --git a/policy/modules/kernel/storage.if b/policy/modules/kernel/storage.if index 6b7eabb9..850d168d 100644 --- a/policy/modules/kernel/storage.if +++ b/policy/modules/kernel/storage.if @@ -1026,16 +1026,16 @@ interface(`storage_filetrans_all_named_dev',` dev_filetrans($1, fixed_disk_device_t, chr_file, "lvm") dev_filetrans($1, removable_device_t, blk_file, "mcd") dev_filetrans($1, removable_device_t, blk_file, "mcdx") - dev_filetrans($1, removable_device_t, chr_file, "megadev0") - dev_filetrans($1, removable_device_t, chr_file, "megadev1") - dev_filetrans($1, removable_device_t, chr_file, "megadev2") - dev_filetrans($1, removable_device_t, chr_file, "megadev3") - dev_filetrans($1, removable_device_t, chr_file, "megadev4") - dev_filetrans($1, removable_device_t, chr_file, "megadev5") - dev_filetrans($1, removable_device_t, chr_file, "megadev6") - dev_filetrans($1, removable_device_t, chr_file, "megadev7") - dev_filetrans($1, removable_device_t, chr_file, "megadev8") - dev_filetrans($1, removable_device_t, chr_file, "megadev9") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev0") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev1") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev2") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev3") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev4") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev5") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev6") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev7") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev8") + dev_filetrans($1, fixed_disk_device_t, chr_file, "megadev9") dev_filetrans($1, removable_device_t, blk_file, "mmcblk0") dev_filetrans($1, removable_device_t, blk_file, "mmcblk1") dev_filetrans($1, removable_device_t, blk_file, "mmcblk2") -- 2.47.3