Label /dev/swradio, /dev/v4l-subdev, /dev/v4l-touch with v4l_device_t

Support for additional video-capture-interface device files. Resolves: rhbz#2330477
fedora-selinux · Dec 10, 2024 · ad96253 · ad96253
1 parent 727bbef
commit ad96253
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc
@@ -225,6 +225,7 @@ ifdef(`distro_suse', `
 /dev/pts(/.*)?			<<none>>
 
 /dev/s(ou)?nd/.*	-c	gen_context(system_u:object_r:sound_device_t,s0)
+/dev/swradio[0-9]+	-c	gen_context(system_u:object_r:v4l_device_t,s0)
 
 /dev/ss[0-9]+		-c	gen_context(system_u:object_r:gpfs_device_t,s0)
 
@@ -241,6 +242,8 @@ ifdef(`distro_suse', `
 
 /dev/vmbus/hv_vss		-c	gen_context(system_u:object_r:hypervvssd_device_t,s0)
 /dev/vmbus/hv_kvp		-c	gen_context(system_u:object_r:hypervkvp_device_t,s0)
+/dev/v4l-subdev[0-9]+	-c	gen_context(system_u:object_r:v4l_device_t,s0)
+/dev/v4l-touch[0-9]+	-c	gen_context(system_u:object_r:v4l_device_t,s0)
 
 /dev/wwan.+		-c	gen_context(system_u:object_r:modem_device_t,s0)