userdomain: allow admin to rw tape storage

2017-10-31 13:37:06 +08:00 · 2017-10-31 13:37:06 +08:00 · d5f6a58a77
parent 289be9e0b4
commit d5f6a58a77
1 changed files with 2 additions and 0 deletions
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@ -1225,6 +1225,8 @@ template(`userdom_admin_user_template',`
 	fs_set_all_quotas($1_t)
 	fs_exec_noxattr($1_t)

+	storage_read_tape($1_t)
+	storage_write_tape($1_t)
 	storage_raw_read_removable_device($1_t)
 	storage_raw_write_removable_device($1_t)