| blob | 327c231922c5fdc6958e50bd951deed0f9e24fcf |
1 module ovirt 1.0.0;
2 require {
3 type fixed_disk_device_t;
4 attribute file_type;
5 type mount_t;
6 type qemu_t;
7 class blk_file { ioctl getattr setattr read write };
8 class file mounton;
9 }
10 # Give qemu_t access to any block device
11 allow qemu_t fixed_disk_device_t:blk_file { ioctl getattr setattr read write };
12 # allow any file to be bindmounted (for /config)
13 allow mount_t file_type:file mounton;