From 7009881cc0a047507591cebf48875947368837af Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Apr 29 2005 20:35:49 +0000
Subject: add in missing devices



---

diff --git a/refpolicy/policy/modules/kernel/devices.te b/refpolicy/policy/modules/kernel/devices.te
index 422d7fb..9c27f2e 100644
--- a/refpolicy/policy/modules/kernel/devices.te
+++ b/refpolicy/policy/modules/kernel/devices.te
@@ -16,6 +16,10 @@ files_make_file(device_t)
 files_make_mountpoint(device_t)
 filesystem_tmpfs_associate(device_t)
 
+type cardmgr_dev_t, device_node;
+filesystem_associate(cardmgr_dev_t)
+filesystem_tmpfs_associate(cardmgr_dev_t)
+
 # Only directories and symlinks should be labeled device_t.
 # If there are other files with this type, it is wrong.
 # Relabelto is allowed for setfiles to function, in case
@@ -98,6 +102,13 @@ filesystem_associate(framebuf_device_t)
 filesystem_tmpfs_associate(framebuf_device_t)
 
 #
+# Type for /dev/mapper/control
+#
+type lvm_control_t, device_node;
+filesystem_associate(lvm_control_t_t)
+filesystem_tmpfs_associate(lvm_control_t_t)
+
+#
 # Type for /dev/cpu/mtrr and /proc/mtrr
 #
 type mtrr_device_t, device_node;
@@ -118,3 +129,7 @@ filesystem_tmpfs_associate(power_device_t)
 type sound_device_t, device_node;
 filesystem_associate(sound_device_t)
 filesystem_tmpfs_associate(sound_device_t)
+
+type xserver_misc_device_t, device_node;
+filesystem_associate(xserver_misc_device_t)
+filesystem_tmpfs_associate(xserver_misc_device_t)
diff --git a/refpolicy/policy/modules/kernel/storage.te b/refpolicy/policy/modules/kernel/storage.te
index 786adcc..eb53b76 100644
--- a/refpolicy/policy/modules/kernel/storage.te
+++ b/refpolicy/policy/modules/kernel/storage.te
@@ -14,6 +14,9 @@ neverallow ~fixed_disk_raw_read fixed_disk_device_t:{ chr_file blk_file } read;
 neverallow ~fixed_disk_raw_write fixed_disk_device_t:{ chr_file blk_file } { append write };
 devices_make_device_node(fixed_disk_device_t)
 
+type lvm_vg_t;
+devices_make_device_node(lvm_vg_t)
+
 #
 # scsi_generic_device_t is the type of /dev/sg*
 # it gives access to ALL SCSI devices (both fixed and removable)