Skip to content

Conversation

@vczilla
Copy link

@vczilla vczilla commented Feb 15, 2018

// xperms
	if (policydb->policyvers >= POLICYDB_VERSION_XPERMS_IOCTL) {
		sepol_allowxperm("domain", "devpts", "chr_file", "0x5400-0x54FF");
		if (sepol_exists("untrusted_app_25_devpts"))
			sepol_allowxperm("domain", "untrusted_app_25_devpts", "chr_file", "0x5400-0x54FF");
	}

Should be changed to:

// xperms
	if (policydb->policyvers >= POLICYDB_VERSION_XPERMS_IOCTL) {
		sepol_allowxperm("domain", "devpts", "chr_file", "0x5400-0x54FF");
		if (sepol_exists("untrusted_app_25_devpts"))
			sepol_allowxperm("domain", "untrusted_app_25_devpts", "chr_file", "0x5400-0x54FF");
          	if (sepol_exists("untrusted_app_devpts"))
			sepol_allowxperm("domain", "untrusted_app_devpts", "chr_file", "0x5400-0x54FF");
       
       }

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants