/u?dev/microcode ?

[Tom London]

A previous posting indicated that /u?dev/microcode should be labeled as
system_u:object_r:cpu_device_t.

Is this still needed? Added to file_contexts/types.fc?

tom

[Russell Coker]

On Fri, 25 Jun 2004 02:49, Tom London <selinux(a)comcast.net&gt; wrote:
>  A previous posting indicated that /u?dev/microcode should be labeled
> as
>  system_u:object_r:cpu_device_t.
>
>  Is this still needed? Added to file_contexts/types.fc? 
Yes it's still needed.  If it's not yet in the fedora policy then it soon will 
be.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

[Stephen Smalley]

On Fri, 2004-06-25 at 00:11, Russell Coker wrote:
>  On Fri, 25 Jun 2004 02:49, Tom London <selinux(a)comcast.net&gt;
> wrote:
>  > A previous posting indicated that /u?dev/microcode should be labeled as
>  > system_u:object_r:cpu_device_t.
>  >
>  > Is this still needed? Added to file_contexts/types.fc?
>  
>  Yes it's still needed.  If it's not yet in the fedora policy then it soon will 
>  be. 
Current file_contexts/types.fc already has the following entry:
/u?dev/cpu/.*           -c      system_u:object_r:cpu_device_t

And ls -Z /dev/cpu/0/microcode does show the right context.

-- 
Stephen Smalley <sds(a)epoch.ncsc.mil&gt;
National Security Agency

[Stephen Smalley]

On Fri, 2004-06-25 at 08:01, Stephen Smalley wrote:
>  Current file_contexts/types.fc already has the following entry:
>  /u?dev/cpu/.*           -c      system_u:object_r:cpu_device_t
>  
>  And ls -Z /dev/cpu/0/microcode does show the right context. 
Sorry, I misread the original posting.  There is no entry for a
/udev/microcode in types.fc.

-- 
Stephen Smalley <sds(a)epoch.ncsc.mil&gt;
National Security Agency