diff --git a/policy/modules/admin/vbetool.te b/policy/modules/admin/vbetool.te index 2c54053..dd445cd 100644 --- a/policy/modules/admin/vbetool.te +++ b/policy/modules/admin/vbetool.te @@ -1,5 +1,5 @@ -policy_module(vbetool, 1.4.0) +policy_module(vbetool, 1.4.1) ######################################## # @@ -15,13 +15,15 @@ init_system_domain(vbetool_t, vbetool_exec_t) # Local policy # -allow vbetool_t self:capability { sys_tty_config sys_admin }; +allow vbetool_t self:capability { dac_override sys_tty_config sys_admin }; allow vbetool_t self:process execmem; dev_wx_raw_memory(vbetool_t) dev_read_raw_memory(vbetool_t) dev_rwx_zero(vbetool_t) -dev_read_sysfs(vbetool_t) +dev_rw_sysfs(vbetool_t) +dev_rw_xserver_misc(vbetool_t) +dev_rw_mtrr(vbetool_t) domain_mmap_low(vbetool_t)