commit a2e4e2656bfdd0bb002123c0e1da893831a47b82
author Stephen Smalley <sds@tycho.nsa.gov> Wed Jun 11 12:09:15 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Thu Jun 12 09:50:00 2014 -0400
tree 983f164904d9689cfd996e13ed9f3baa617f5a99
parent 62af83810baa7a6c07a8673136c1cdf5a6763b48

Allow shell to read/search /dev/input directory.

Resolves denials such as:
avc: denied { read } for pid=16758 comm="getevent" name="input" dev="tmpfs" ino=6018 scontext=u:r:shell:s0 tcontext=u:object_r:input_device:s0 tclass=dir

Change-Id: I709bd20a03a5271382b191393d55a34b0b8e4e0c
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

shell.te

diff --git a/shell.te b/shell.te
index 6df9c85..aa02ce5 100644
--- a/shell.te
+++ b/shell.te
@@ -29,6 +29,7 @@
 allow shell devpts:chr_file rw_file_perms;
 allow shell tty_device:chr_file rw_file_perms;
 allow shell console_device:chr_file rw_file_perms;
+allow shell input_device:dir r_dir_perms;
 allow shell input_device:chr_file rw_file_perms;
 allow shell system_file:file x_file_perms;
 allow shell shell_exec:file rx_file_perms;