diff --git a/refpolicy/policy/modules/kernel/devices.te b/refpolicy/policy/modules/kernel/devices.te index b9fd2f9..4230c93 100644 --- a/refpolicy/policy/modules/kernel/devices.te +++ b/refpolicy/policy/modules/kernel/devices.te @@ -22,10 +22,6 @@ filesystem_tmpfs_associate(device_t) #cjp: want this, but udev policy breaks this #neverallow * device_t:{ file fifo_file sock_file chr_file blk_file } ~{ getattr setattr relabelfrom relabelto }; -type cardmgr_dev_t, device_node; -filesystem_associate(cardmgr_dev_t) -filesystem_tmpfs_associate(cardmgr_dev_t) - # # Type for /dev/agpgart # @@ -40,6 +36,10 @@ type apm_bios_t, device_node; filesystem_associate(apm_bios_t) filesystem_tmpfs_associate(apm_bios_t) +type cardmgr_dev_t, device_node; +filesystem_associate(cardmgr_dev_t) +filesystem_tmpfs_associate(cardmgr_dev_t) + # # clock_device_t is the type of # /dev/rtc.