commit cf141426d45067f4a9709d3cf79eef3609d63ab1
author Geremy Condra <gcondra@google.com> Thu Mar 21 20:59:46 2013 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Mar 21 20:59:47 2013 +0000
tree 7883f86ba5b510ce8e9358377fe41b5b4acd69b4
parent 9aea69c004b2c2ce12458374ae32482775f599f4
parent 193d1292fab464bde1e785b27b019cc869aac8a8

Merge "Strengthen setenforce and setbool assertions"

unconfined.te

diff --git a/unconfined.te b/unconfined.te
index e016584..af60be8 100644
--- a/unconfined.te
+++ b/unconfined.te
@@ -11,9 +11,8 @@
 allow unconfineddomain domain:ipc_class_set *;
 allow unconfineddomain domain:key *;
 allow unconfineddomain fs_type:filesystem *;
-allow unconfineddomain fs_type:dir_file_class_set *;
-allow unconfineddomain dev_type:dir_file_class_set *;
-allow unconfineddomain file_type:dir_file_class_set *;
+allow unconfineddomain {fs_type dev_type file_type}:{ dir blk_file lnk_file sock_file fifo_file } *;
+allow unconfineddomain {fs_type dev_type file_type}:{ chr_file file } ~entrypoint;
 allow unconfineddomain node_type:node *;
 allow unconfineddomain node_type:{ tcp_socket udp_socket } node_bind;
 allow unconfineddomain netif_type:netif *;