From ecf83667ab017939cce4b0cb046b5a937f895700 Mon Sep 17 00:00:00 2001 From: Sven Vermeulen Date: Mon, 3 Oct 2011 21:24:38 +0200 Subject: [PATCH] Allow sysadm to interact with asterisk When administering asterisk, one often ran command is "asterisk -r" which yields the asterisk CLI (when the asterisk server is running). To be able to run this, you need asterisk_stream_connect privileges. Assign these privileges to the sysadm_r Signed-off-by: Sven Vermeulen --- policy/modules/roles/sysadm.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te index 954417ff7..7a5c40bde 100644 --- a/policy/modules/roles/sysadm.te +++ b/policy/modules/roles/sysadm.te @@ -85,6 +85,10 @@ optional_policy(` apt_run(sysadm_t, sysadm_r) ') +optional_policy(` + asterisk_stream_connect(sysadm_t) +') + optional_policy(` auditadm_role_change(sysadm_r) ')