diff --git a/file.te b/file.te index 8e3bbe587b3bd3565381f8c5bae29dd9ccacecb1..f30911aeaab237be774f3e2ac05b4ae6061656d4 100644 --- a/file.te +++ b/file.te @@ -215,7 +215,7 @@ type property_contexts, file_type; # Allow files to be created in their appropriate filesystems. allow fs_type self:filesystem associate; allow sysfs_type sysfs:filesystem associate; -allow debugfs_type debugfs:filesystem associate; +allow debugfs_type { debugfs debugfs_tracing }:filesystem associate; allow file_type labeledfs:filesystem associate; allow file_type tmpfs:filesystem associate; allow file_type rootfs:filesystem associate; diff --git a/genfs_contexts b/genfs_contexts index 2700a945895ef4526fcc2a458732205e6ff66b41..d823476e7b9dd9184699934840bdaf17deb5dccf 100644 --- a/genfs_contexts +++ b/genfs_contexts @@ -34,6 +34,7 @@ genfscon sysfs / u:object_r:sysfs:s0 genfscon inotifyfs / u:object_r:inotify:s0 genfscon vfat / u:object_r:vfat:s0 genfscon debugfs / u:object_r:debugfs:s0 +genfscon tracefs / u:object_r:debugfs_tracing:s0 genfscon fuse / u:object_r:fuse:s0 genfscon pstore / u:object_r:pstorefs:s0 genfscon functionfs / u:object_r:functionfs:s0 diff --git a/init.te b/init.te index 9a7fde755e1dfbd907b017d851dd868e76bddce4..716046638edcb5e4b7d64680e8d0c7092a7ff0d9 100644 --- a/init.te +++ b/init.te @@ -156,7 +156,7 @@ allow init { }:lnk_file { create getattr setattr relabelfrom unlink }; allow init {file_type -system_file -exec_type}:dir_file_class_set relabelto; -allow init { sysfs debugfs }:{ dir file lnk_file } { getattr relabelfrom }; +allow init { sysfs debugfs debugfs_tracing }:{ dir file lnk_file } { getattr relabelfrom }; allow init { sysfs_type debugfs_type }:{ dir file lnk_file } relabelto; allow init dev_type:dir create_dir_perms; allow init dev_type:lnk_file create;