add zfs-kernel

[selinux.git] / zfs-kernel / zfs-kernel.te

diff --git a/zfs-kernel/zfs-kernel.te b/zfs-kernel/zfs-kernel.te
new file mode 100644 (file)
index 0000000..3e3aabf
--- /dev/null
+++ b/zfs-kernel/zfs-kernel.te
@@ -0,0 +1,8 @@
+policy_module(zfs-kernel,1.28)
+
+require {
+    type kernel_generic_helper_t;
+}
+
+# Allow the kernel to mount file systems
+mount_domtrans(kernel_generic_helper_t);