diff --git a/policy/modules/system/raid.if b/policy/modules/system/raid.if index 5ea38d080..b1a85b512 100644 --- a/policy/modules/system/raid.if +++ b/policy/modules/system/raid.if @@ -19,6 +19,32 @@ interface(`raid_domtrans_mdadm',` domtrans_pattern($1, mdadm_exec_t, mdadm_t) ') +###################################### +## +## Execute a domain transition to mdadm_t for the +## specified role, allowing it to use the mdadm_t +## domain +## +## +## +## Role allowed to access mdadm_t domain +## +## +## +## +## Domain allowed to transition to mdadm_t +## +## +# +interface(`raid_run_mdadm',` + gen_require(` + type mdadm_t; + ') + + role $1 types mdadm_t; + raid_domtrans_mdadm($2) +') + ######################################## ## ## Create, read, write, and delete the mdadm pid files. @@ -47,29 +73,3 @@ interface(`raid_manage_mdadm_pid',` # mdadm policy allow $1 mdadm_var_run_t:file manage_file_perms; ') - -###################################### -## -## Execute a domain transition to mdadm_t for the -## specified role, allowing it to use the mdadm_t -## domain -## -## -## -## Role allowed to access mdadm_t domain -## -## -## -## -## Domain allowed to transition to mdadm_t -## -## -# -interface(`raid_run_mdadm',` - gen_require(` - type mdadm_t; - ') - - role $1 types mdadm_t; - raid_domtrans_mdadm($2) -')