From 6ae29c737847233ff2187244d77324dfb478d428 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Fri, 19 Feb 2010 11:34:28 -0500
Subject: [PATCH] Vbetool patch from Dan Walsh.

---
 policy/modules/admin/vbetool.te | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/policy/modules/admin/vbetool.te b/policy/modules/admin/vbetool.te
index 2c5405352..dd445cda0 100644
--- a/policy/modules/admin/vbetool.te
+++ b/policy/modules/admin/vbetool.te
@@ -1,5 +1,5 @@
 
-policy_module(vbetool, 1.4.0)
+policy_module(vbetool, 1.4.1)
 
 ########################################
 #
@@ -15,13 +15,15 @@ init_system_domain(vbetool_t, vbetool_exec_t)
 # Local policy
 #
 
-allow vbetool_t self:capability { sys_tty_config sys_admin };
+allow vbetool_t self:capability { dac_override sys_tty_config sys_admin };
 allow vbetool_t self:process execmem;
 
 dev_wx_raw_memory(vbetool_t)
 dev_read_raw_memory(vbetool_t)
 dev_rwx_zero(vbetool_t)
-dev_read_sysfs(vbetool_t)
+dev_rw_sysfs(vbetool_t)
+dev_rw_xserver_misc(vbetool_t)
+dev_rw_mtrr(vbetool_t)
 
 domain_mmap_low(vbetool_t)