diff --git a/file.te b/file.te index ae9ba0625658aa25a0894cc81491e26fd9d9b003..b019678b414f48a227ab07c73babcb8d138d9fd8 100644 --- a/file.te +++ b/file.te @@ -230,7 +230,7 @@ type property_contexts, file_type; # Allow files to be created in their appropriate filesystems. allow fs_type self:filesystem associate; allow sysfs_type sysfs:filesystem associate; -allow debugfs_type debugfs:filesystem associate; +allow debugfs_type { debugfs debugfs_tracing }:filesystem associate; allow file_type labeledfs:filesystem associate; allow file_type tmpfs:filesystem associate; allow file_type rootfs:filesystem associate; diff --git a/genfs_contexts b/genfs_contexts index d3d8bfb7ec3b8082754ee95731d27d5dfd134002..31794a1e834096abc55a76c71a647ba187a826e3 100644 --- a/genfs_contexts +++ b/genfs_contexts @@ -34,6 +34,7 @@ genfscon sysfs / u:object_r:sysfs:s0 genfscon inotifyfs / u:object_r:inotify:s0 genfscon vfat / u:object_r:vfat:s0 genfscon debugfs / u:object_r:debugfs:s0 +genfscon tracefs / u:object_r:debugfs_tracing:s0 genfscon fuse / u:object_r:fuse:s0 genfscon configfs / u:object_r:configfs:s0 genfscon sdcardfs / u:object_r:sdcardfs:s0 diff --git a/init.te b/init.te index f9e81ff861516b368d7c4809f835b98bc66faf32..d30bfa941f7dde8ebc85afd6b2953dba344f161d 100644 --- a/init.te +++ b/init.te @@ -160,7 +160,7 @@ allow init { }:lnk_file { create getattr setattr relabelfrom unlink }; allow init {file_type -system_file -exec_type}:dir_file_class_set relabelto; -allow init { sysfs debugfs }:{ dir file lnk_file } { getattr relabelfrom }; +allow init { sysfs debugfs debugfs_tracing }:{ dir file lnk_file } { getattr relabelfrom }; allow init { sysfs_type debugfs_type }:{ dir file lnk_file } relabelto; allow init dev_type:dir create_dir_perms; allow init dev_type:lnk_file create;