diff --git a/file.te b/file.te index 0e08a38b5fd350185721cc0f7d2996ef1900d292..623bb8df3ad53075942777a25458b931b2e222ba 100644 --- a/file.te +++ b/file.te @@ -11,6 +11,7 @@ type usermodehelper, fs_type, sysfs_type; type qtaguid_proc, fs_type, mlstrustedobject; type proc_bluetooth_writable, fs_type; type proc_cpuinfo, fs_type; +type proc_iomem, fs_type; type proc_net, fs_type; type proc_sysrq, fs_type; type selinuxfs, fs_type, mlstrustedobject; diff --git a/genfs_contexts b/genfs_contexts index 4b16ffc1f443f6bd4ca2b88f1c2f423d734a8819..c2c5bb7bb0f0b83dab56cd2a2fc598c337eebd0b 100644 --- a/genfs_contexts +++ b/genfs_contexts @@ -2,6 +2,7 @@ genfscon rootfs / u:object_r:rootfs:s0 # proc labeling can be further refined (longest matching prefix). genfscon proc / u:object_r:proc:s0 +genfscon proc /iomem u:object_r:proc_iomem:s0 genfscon proc /net u:object_r:proc_net:s0 genfscon proc /net/xt_qtaguid/ctrl u:object_r:qtaguid_proc:s0 genfscon proc /cpuinfo u:object_r:proc_cpuinfo:s0