Define contextmount_type attribute and add it to oemfs.
Several device-specific policy changes with the same Change-Id
also add this attribute to device-specific types.
Change-Id: I09e13839b1956f61875a38844fe4fc3c911ea60f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/attributes b/attributes
index 64de61a..613ed8f 100644
--- a/attributes
+++ b/attributes
@@ -11,6 +11,9 @@
# All types used for filesystems.
attribute fs_type;
+# All types used for context= mounts.
+attribute contextmount_type;
+
# All types used for files that can exist on a labeled fs.
# Do not use for pseudo file types.
attribute file_type;
diff --git a/file.te b/file.te
index 4e2b717..1ea4a72 100644
--- a/file.te
+++ b/file.te
@@ -33,7 +33,7 @@
type debugfs, fs_type, mlstrustedobject;
type pstorefs, fs_type;
type functionfs, fs_type;
-type oemfs, fs_type;
+type oemfs, fs_type, contextmount_type;
type usbfs, fs_type;
# File types