> Thanks. that prompted me to see what happened to the seandroid > repository on bitbucket because it has been stale for a while now. > > found > https://android.googlesource.com/platform/external/sepolicy/+/master/ioctl_macros > > That should be easy to implement on GNU/Linux indeed. Will try that soon It's currently more of a blacklist - just disallow a few operations. It would be nice to whittle it down to an actual whitelist. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.