[selinux-policy: 1652/3172] make ttys and ptys device nodes

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 21:27:52 UTC 2010


commit f1be09c2b15e6cc76a44b0e70274d5bf3917a3f3
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Feb 20 20:17:07 2007 +0000

    make ttys and ptys device nodes

 Changelog                         |    1 +
 policy/modules/kernel/terminal.if |   10 ++--------
 policy/modules/kernel/terminal.te |    2 +-
 3 files changed, 4 insertions(+), 9 deletions(-)
---
diff --git a/Changelog b/Changelog
index 7b518cc..c286d15 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,4 @@
+- Fix ptys and ttys to be device nodes.
 - Fix explicit use of httpd_t in openca_domtrans().
 - Clean up file context regexes in apache and java, from Eamon Walsh.
 - Patches from Dan Walsh:
diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if
index 1e2d703..fde29f6 100644
--- a/policy/modules/kernel/terminal.if
+++ b/policy/modules/kernel/terminal.if
@@ -19,7 +19,7 @@ interface(`term_pty',`
 		type devpts_t;
 	')
 
-	files_type($1)
+	dev_node($1)
 	allow $1 devpts_t:filesystem associate;
 	typeattribute $1 ptynode;
 ')
@@ -89,13 +89,7 @@ interface(`term_tty',`
 
 	typeattribute $1 ttynode, serial_device;
 
-	# cjp: ?
-	files_associate_tmp($1)
-
-	# static /dev:
-	fs_associate($1)
-	# udev:
-	fs_associate_tmpfs($1)
+	dev_node($1)
 ')
 
 ########################################
diff --git a/policy/modules/kernel/terminal.te b/policy/modules/kernel/terminal.te
index 8be16a1..a5e4d8d 100644
--- a/policy/modules/kernel/terminal.te
+++ b/policy/modules/kernel/terminal.te
@@ -1,5 +1,5 @@
 
-policy_module(terminal,1.3.0)
+policy_module(terminal,1.3.1)
 
 ########################################
 #


More information about the scm-commits mailing list