From 299db7080c4c8ff8d0c7aa8525073a5bbd123ebe Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Fri, 14 May 2010 10:24:11 -0400
Subject: [PATCH] CVS patch from Dan Walsh.

cvs needs dac_override when it tries to read shadow
---
 policy/modules/services/cvs.te | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/policy/modules/services/cvs.te b/policy/modules/services/cvs.te
index 391305e7e..d799c61dd 100644
--- a/policy/modules/services/cvs.te
+++ b/policy/modules/services/cvs.te
@@ -1,5 +1,5 @@
 
-policy_module(cvs, 1.8.0)
+policy_module(cvs, 1.8.1)
 
 ########################################
 #
@@ -92,6 +92,7 @@ mta_send_mail(cvs_t)
 # cjp: typeattribute doesnt work in conditionals yet
 auth_can_read_shadow_passwords(cvs_t)
 tunable_policy(`allow_cvs_read_shadow',`
+	allow cvs_t self:capability dac_override;
 	auth_tunable_read_shadow(cvs_t)
 ')