101 lines
6.6 KiB
Text
101 lines
6.6 KiB
Text
|
/dev/\.tmp-block-.* -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/n?(raw)?[qr]ft[0-3] -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/n?[hs]t[0-9].* -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/n?z?qft[0-3] -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/n?osst[0-3].* -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/n?pt[0-9]+ -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/n?tpqic[12].* -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/[shmxv]d[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/aztcd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/bcache[0-9]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/bpcd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/bsg/.+ -c gen_context(system_u:object_r:scsi_generic_device_t,s0)
|
||
|
|
/dev/cdu.* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/cm20.* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/dasd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/dasd[^/]* -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/dm-[0-9]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/drbd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/etherd/.+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/fd[^/]+ -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/flash[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/gscd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/hitcd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/ht[0-1] -b gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/hwcdrom -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/initrd -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/jsfd -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/jsflash -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/loop.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/lvm -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/mcdx? -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/megaraid_sas_ioctl_node -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/megadev.* -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/mmcblk.* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/mspblk.* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/mtd.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/mtd.* -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/nb[^/]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/ng[0-9]+n[0-9]+ -c gen_context(system_u:object_r:fixed_disk_device_t,s0)
|
||
|
|
/dev/nvme[0-9]+ -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/nvme[0-9]n[^/]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/nvme-fabrics -c gen_context(system_u:object_r:fixed_disk_device_t,s0)
|
||
|
|
/dev/nvme-subsys[0-9]+ -c gen_context(system_u:object_r:fixed_disk_device_t,s0)
|
||
|
|
/dev/optcd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/p[fg][0-3] -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/pcd[0-3] -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/pd[a-d][^/]* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/pg[0-3] -c gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/pktcdvd[0-7] -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/pktcdvd/control -c gen_context(system_u:object_r:pktcdvd_control_device_t,s0)
|
||
|
|
/dev/pktcdvd/.+ -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/ps3d.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/ram.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/(raw/)?rawctl -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/rd.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/rb.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
ifdef(`distro_redhat', `
|
||
|
|
/dev/root -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
')
|
||
|
|
/dev/s(cd|r)[^/]* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/sbpcd.* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/sg[0-9]+ -c gen_context(system_u:object_r:scsi_generic_device_t,s0)
|
||
|
|
/dev/sjcd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/sonycd -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
/dev/tape.* -c gen_context(system_u:object_r:tape_device_t,s0)
|
||
|
|
/dev/tgt -c gen_context(system_u:object_r:scsi_generic_device_t,s0)
|
||
|
|
/dev/tw[a-z][^/]* -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/ub[a-z][^/]+ -b gen_context(system_u:object_r:removable_device_t,mls_systemhigh)
|
||
|
|
/dev/ubd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/vd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/xvd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/zram[0-9]+ -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/ataraid/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/cciss/[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/fuse -c gen_context(system_u:object_r:fuse_device_t,s0)
|
||
|
|
/dev/floppy/[^/]* -b gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
|
||
|
|
/dev/i2o/hd[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/ida/[^/]* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/md/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/dev/mapper/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/device-mapper -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/raw/raw[0-9]+ -c gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/scramdisk/.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
|
||
|
|
/dev/usb/rio500 -c gen_context(system_u:object_r:removable_device_t,s0)
|
||
|
|
|
||
|
|
/lib/udev/devices/loop.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/lib/udev/devices/fuse -c gen_context(system_u:object_r:fuse_device_t,s0)
|
||
|
|
|
||
|
|
/usr/lib/udev/devices/loop.* -b gen_context(system_u:object_r:fixed_disk_device_t,mls_systemhigh)
|
||
|
|
/usr/lib/udev/devices/fuse -c gen_context(system_u:object_r:fuse_device_t,s0)
|