mirror of
https://github.com/siderolabs/talos.git
synced 2025-12-14 22:12:01 +01:00
a13f82c594
Use udev rules to assign basic device file labels based on their subsystem Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
12 lines
640 B
Plaintext
12 lines
640 B
Plaintext
SUBSYSTEM=="*",SECLABEL{selinux}="system_u:object_r:device_t:s0"
|
|
|
|
SUBSYSTEM=="rtc",SECLABEL{selinux}="system_u:object_r:rtc_device_t:s0"
|
|
SUBSYSTEM=="mtd",SECLABEL{selinux}="system_u:object_r:mtd_device_t:s0"
|
|
SUBSYSTEM=="tpm",SECLABEL{selinux}="system_u:object_r:tpm_device_t:s0"
|
|
SUBSYSTEM=="tpmrm",SECLABEL{selinux}="system_u:object_r:tpm_device_t:s0"
|
|
|
|
KERNEL=="watchdog",SECLABEL{selinux}="system_u:object_r:wdt_device_t:s0"
|
|
KERNEL=="watchdog*",SECLABEL{selinux}="system_u:object_r:wdt_device_t:s0"
|
|
KERNEL=="null",SECLABEL{selinux}="system_u:object_r:null_device_t:s0"
|
|
KERNEL=="zero",SECLABEL{selinux}="system_u:object_r:null_device_t:s0"
|