path: root/sepolicy/kernel.te

#============= kernel ==============
allow kernel device:blk_file { create setattr };
allow kernel device:dir { write add_name };
allow kernel self:capability mknod;

#============= kernel ==============
allow kernel device:chr_file { create getattr setattr unlink };
allow kernel device:dir { remove_name rmdir };