From 705008ba8ef960cf2e4813b4b8c5a87b919d545f Mon Sep 17 00:00:00 2001 From: Wenzong Fan Date: Sat, 15 Feb 2014 04:22:47 -0500 Subject: [PATCH] policy/modules/system/mount: make mount_t domain MLS trusted for writing to processes up to its clearance Fixes: avc: denied { setsched } for pid=148 comm="mount" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=process permissive=1 Upstream-Status: Inappropriate [embedded specific] Signen-off-by: Wenzong Fan Signed-off-by: Yi Zhao --- policy/modules/system/mount.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/mount.te b/policy/modules/system/mount.te index e39ab41a8..3481f9294 100644 --- a/policy/modules/system/mount.te +++ b/policy/modules/system/mount.te @@ -116,6 +116,7 @@ fs_dontaudit_write_all_image_files(mount_t) mls_file_read_all_levels(mount_t) mls_file_write_all_levels(mount_t) +mls_process_write_to_clearance(mount_t) selinux_get_enforce_mode(mount_t) -- 2.17.1