From 4f8b753f244b98fbc098082cf3a3a5d74427f575 Mon Sep 17 00:00:00 2001 From: Guido Trentalancia Date: Sat, 13 May 2017 23:15:27 +0200 Subject: [PATCH] base: role changes for the new libmtp module This is the base part of the policy needed to support libmtp (an Initiator implementation of the Media Transfer Protocol). Signed-off-by: Guido Trentalancia --- policy/modules/roles/staff.te | 4 ++++ policy/modules/roles/sysadm.te | 4 ++++ policy/modules/roles/unprivuser.te | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te index 27c2fffa0..10a9f1cd3 100644 --- a/policy/modules/roles/staff.te +++ b/policy/modules/roles/staff.te @@ -124,6 +124,10 @@ ifndef(`distro_redhat',` java_role(staff_r, staff_t) ') + optional_policy(` + libmtp_role(staff_r, staff_t) + ') + optional_policy(` lockdev_role(staff_r, staff_t) ') diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te index 54df43546..5de7c5352 100644 --- a/policy/modules/roles/sysadm.te +++ b/policy/modules/roles/sysadm.te @@ -550,6 +550,10 @@ optional_policy(` ldap_admin(sysadm_t, sysadm_r) ') +optional_policy(` + libmtp_role(sysadm_r, sysadm_t) +') + optional_policy(` libs_run_ldconfig(sysadm_t, sysadm_r) ') diff --git a/policy/modules/roles/unprivuser.te b/policy/modules/roles/unprivuser.te index 1cf53e1c1..b7cecd64a 100644 --- a/policy/modules/roles/unprivuser.te +++ b/policy/modules/roles/unprivuser.te @@ -97,6 +97,10 @@ ifndef(`distro_redhat',` java_role(user_r, user_t) ') + optional_policy(` + libmtp_role(user_r, user_t) + ') + optional_policy(` lockdev_role(user_r, user_t) ')