diff --git a/private/apexd.te b/private/apexd.te index 3bfc3cdaf0b8c6c05a408a0139b55383dfbf00f5..d7a31732f85526fb7fa9b60cdcb62c2733862d52 100644 --- a/private/apexd.te +++ b/private/apexd.te @@ -14,7 +14,14 @@ allow apexd apex_data_file:file rw_file_perms; allow apexd loop_control_device:chr_file rw_file_perms; # allow apexd to access loop devices allow apexd loop_device:blk_file rw_file_perms; -allowxperm apexd loop_device:blk_file ioctl LOOP_GET_STATUS64; +allowxperm apexd loop_device:blk_file ioctl { + LOOP_GET_STATUS64 + LOOP_SET_STATUS64 + LOOP_SET_FD + LOOP_SET_BLOCK_SIZE + LOOP_SET_DIRECT_IO + LOOP_CLR_FD +}; # allow apexd to access /dev/block allow apexd block_device:dir r_dir_perms; diff --git a/public/ioctl_defines b/public/ioctl_defines index a46302333d3ae55f7efcea9b040e6fd2e6592c0d..97869f9f9f82d54f16f59bc7f0c98fe0bed5dc64 100644 --- a/public/ioctl_defines +++ b/public/ioctl_defines @@ -1363,7 +1363,9 @@ define(`LOOP_CTL_GET_FREE', `0x00004c82') define(`LOOP_CTL_REMOVE', `0x00004c81') define(`LOOP_GET_STATUS', `0x00004c03') define(`LOOP_GET_STATUS64', `0x00004c05') +define(`LOOP_SET_BLOCK_SIZE', `0x00004c09') define(`LOOP_SET_CAPACITY', `0x00004c07') +define(`LOOP_SET_DIRECT_IO', `0x00004c08') define(`LOOP_SET_FD', `0x00004c00') define(`LOOP_SET_STATUS', `0x00004c02') define(`LOOP_SET_STATUS64', `0x00004c04')