From 9d3321e4fe66a96ede00177be79067dfda8cd63e Mon Sep 17 00:00:00 2001 From: Jonathan Davies Date: Sat, 29 Aug 2020 20:43:38 +0000 Subject: [PATCH] userdomain.if: Marked usbguard user modify tunable as optional so usbguard may be excluded. Thanks to Dominick Grift for helping me pin-point this. Signed-off-by: Jonathan Davies --- policy/modules/system/userdomain.if | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 8b13d65fe..02ead5b2a 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -1216,8 +1216,10 @@ template(`userdom_unpriv_user_template', ` ') # Allow controlling usbguard - tunable_policy(`usbguard_user_modify_rule_files',` - usbguard_stream_connect($1_t) + optional_policy(` + tunable_policy(`usbguard_user_modify_rule_files',` + usbguard_stream_connect($1_t) + ') ') ')