diff --git a/refpolicy/policy/modules/kernel/devices.te b/refpolicy/policy/modules/kernel/devices.te index c6108f2..58787ea 100644 --- a/refpolicy/policy/modules/kernel/devices.te +++ b/refpolicy/policy/modules/kernel/devices.te @@ -1,5 +1,5 @@ -policy_module(devices,1.1.7) +policy_module(devices,1.1.8) ######################################## # @@ -86,8 +86,8 @@ dev_node(lvm_control_t) type memory_device_t; dev_node(memory_device_t) -neverallow ~memory_raw_read memory_device_t:{ chr_file blk_file } read; -neverallow ~memory_raw_write memory_device_t:{ chr_file blk_file } { append write }; +neverallow ~{ memory_raw_read devices_unconfined_type } memory_device_t:{ chr_file blk_file } read; +neverallow ~{ memory_raw_write devices_unconfined_type } memory_device_t:{ chr_file blk_file } { append write }; type misc_device_t; dev_node(misc_device_t)