From 1699b2ae43f7ddc4351ced913449a22a789b00d0 Mon Sep 17 00:00:00 2001 From: Stephen Smalley <sds@tycho.nsa.gov> Date: Fri, 30 May 2014 08:49:51 -0400 Subject: [PATCH] Define contextmount_type attribute and add it to oemfs. Several device-specific policy changes with the same Change-Id also add this attribute to device-specific types. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> (cherry picked from commit d2503ba864b4a8b992529178608aa3c881626006) Change-Id: I08a718ba0d91641de720440e16abc0a04f5ec5a5 --- attributes | 3 +++ file.te | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/attributes b/attributes index 64de61a5e..613ed8f35 100644 --- a/attributes +++ b/attributes @@ -11,6 +11,9 @@ attribute domain; # All types used for filesystems. attribute fs_type; +# All types used for context= mounts. +attribute contextmount_type; + # All types used for files that can exist on a labeled fs. # Do not use for pseudo file types. attribute file_type; diff --git a/file.te b/file.te index 4e2b717e6..1ea4a721f 100644 --- a/file.te +++ b/file.te @@ -33,7 +33,7 @@ type sdcard_external, sdcard_type, fs_type, mlstrustedobject; type debugfs, fs_type, mlstrustedobject; type pstorefs, fs_type; type functionfs, fs_type; -type oemfs, fs_type; +type oemfs, fs_type, contextmount_type; type usbfs, fs_type; # File types -- GitLab