diff --git a/fsck.te b/fsck.te index e90a49e9b75de2008e05dfaa566b07cdbf94752f..cdf1188aa8fb72a8d11af257f3b3765a2fe59f31 100644 --- a/fsck.te +++ b/fsck.te @@ -21,6 +21,10 @@ allow fsck userdata_block_device:blk_file rw_file_perms; allow fsck cache_block_device:blk_file rw_file_perms; allow fsck dm_device:blk_file rw_file_perms; +# fsck performs a stat() on swap to verify that it is a valid +# swap device before setting the EXT2_MF_SWAP mount flag. +allow fsck swap_block_device:blk_file getattr; + ### ### neverallow rules ###