From d5f6a58a7710ce7c74695c4b1d60f4c836a6e8ef Mon Sep 17 00:00:00 2001 From: Jason Zaman Date: Tue, 31 Oct 2017 13:37:06 +0800 Subject: [PATCH] userdomain: allow admin to rw tape storage --- policy/modules/system/userdomain.if | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 9d817e32e..750bc7224 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -1225,6 +1225,8 @@ template(`userdom_admin_user_template',` fs_set_all_quotas($1_t) fs_exec_noxattr($1_t) + storage_read_tape($1_t) + storage_write_tape($1_t) storage_raw_read_removable_device($1_t) storage_raw_write_removable_device($1_t)