From ad9625374ac86c9b5dc7a2fc72fa8a269fa51c47 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Tue, 10 Dec 2024 19:12:25 +0100 Subject: [PATCH] Label /dev/swradio, /dev/v4l-subdev, /dev/v4l-touch with v4l_device_t Support for additional video-capture-interface device files. Resolves: rhbz#2330477 --- policy/modules/kernel/devices.fc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc index 8851152e72..e7d7c8dcd3 100644 --- a/policy/modules/kernel/devices.fc +++ b/policy/modules/kernel/devices.fc @@ -225,6 +225,7 @@ ifdef(`distro_suse', ` /dev/pts(/.*)? <> /dev/s(ou)?nd/.* -c gen_context(system_u:object_r:sound_device_t,s0) +/dev/swradio[0-9]+ -c gen_context(system_u:object_r:v4l_device_t,s0) /dev/ss[0-9]+ -c gen_context(system_u:object_r:gpfs_device_t,s0) @@ -241,6 +242,8 @@ ifdef(`distro_suse', ` /dev/vmbus/hv_vss -c gen_context(system_u:object_r:hypervvssd_device_t,s0) /dev/vmbus/hv_kvp -c gen_context(system_u:object_r:hypervkvp_device_t,s0) +/dev/v4l-subdev[0-9]+ -c gen_context(system_u:object_r:v4l_device_t,s0) +/dev/v4l-touch[0-9]+ -c gen_context(system_u:object_r:v4l_device_t,s0) /dev/wwan.+ -c gen_context(system_u:object_r:modem_device_t,s0)