diff --git a/init.te b/init.te index 676b7841033f353dfc0eacd89daba90a1f02828d..a15d2df72921aa7ca1299f142396602e855d8aa3 100644 --- a/init.te +++ b/init.te @@ -20,6 +20,11 @@ allow init properties_serial:file { write relabelto }; allow init property_type:file { create_file_perms relabelto }; # /dev/socket allow init { device socket_device }:dir relabelto; +# /dev/device-mapper, /dev/block(/.*)? +allow init tmpfs:{ chr_file blk_file } relabelfrom; +allow init tmpfs:blk_file getattr; +allow init block_device:{ dir blk_file } relabelto; +allow init dm_device:{ chr_file blk_file } relabelto; allow init kernel:fd use;