Skip to content

Commit

Permalink
device: Move dev_rw_uhid definition.
Browse files Browse the repository at this point in the history
Signed-off-by: Chris PeBenito <[email protected]>
  • Loading branch information
pebenito committed Jun 5, 2024
1 parent 7a33b4b commit 1cbe455
Showing 1 changed file with 19 additions and 18 deletions.
37 changes: 19 additions & 18 deletions policy/modules/kernel/devices.if
Original file line number Diff line number Diff line change
Expand Up @@ -4851,6 +4851,25 @@ interface(`dev_rw_tpm',`
rw_chr_files_pattern($1, device_t, tpm_device_t)
')

#####################
## <summary>
## Allow open/read/write uhid device
## </summary>
## <param name="domain">
## <summary>
## Domain allowed rw to uhid device
## to communicate with uhid input node
## </summary>
## </param>
#
interface(`dev_rw_uhid',`
gen_require(`
type uhid_device_t;
')

allow $1 uhid_device_t:chr_file rw_chr_file_perms;
')

########################################
## <summary>
## Read from pseudo random number generator devices (e.g., /dev/urandom).
Expand Down Expand Up @@ -5858,21 +5877,3 @@ interface(`dev_unconfined',`

typeattribute $1 devices_unconfined_type;
')

#####################
## <summary>
## Allow open/read/write uhid device
## </summary>
## <param name="domain">
## <summary>
## Domain allowed rw to uhid device
## to communicate with uhid input node
## </summary>
## </param>
#
interface(`dev_rw_uhid',`
gen_require(`
type uhid_device_t;
')
allow $1 uhid_device_t:chr_file rw_chr_file_perms ;
')

0 comments on commit 1cbe455

Please sign in to comment.