From e6c3e38391ac16c886a924868157d0c2b47d0bd7 Mon Sep 17 00:00:00 2001 From: Alexander Egorenkov Date: Thu, 2 Oct 2025 10:33:31 +0200 Subject: [PATCH] Remove vfio_device_t label from /dev/sclp[0-9]* and /dev/vmcp[0-9]* /dev/sclp[0-9]* and /dev/vmcp[0-9]* are s390x-specific character devices which are unrelated to VFIO. Therefore, change the label back to device_t. Fixes: 61939dae5285 ("Add support for /dev/vmcp and /dev/sclp") Signed-off-by: Alexander Egorenkov --- policy/modules/kernel/devices.fc | 2 -- 1 file changed, 2 deletions(-) diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc index 8f58820acd..eceb66f5dc 100644 --- a/policy/modules/kernel/devices.fc +++ b/policy/modules/kernel/devices.fc @@ -168,8 +168,6 @@ ifdef(`distro_suse', ` /dev/vc-mem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) /dev/vfio/(vfio)?[0-9]* -c gen_context(system_u:object_r:vfio_device_t,s0) /dev/clp[0-9]* -c gen_context(system_u:object_r:vfio_device_t,s0) -/dev/sclp[0-9]* -c gen_context(system_u:object_r:vfio_device_t,s0) -/dev/vmcp[0-9]* -c gen_context(system_u:object_r:vfio_device_t,s0) /dev/vhost-net -c gen_context(system_u:object_r:vhost_device_t,s0) /dev/vhost-vdpa-[0-9]+ -c gen_context(system_u:object_r:vhost_device_t,s0) /dev/vhost-vsock -c gen_context(system_u:object_r:vhost_device_t,s0)