From 0ebf819eb9c7d2b153dd1f7769ad8af667e87d13 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Fri, 11 Oct 2013 09:48:34 -0400
Subject: [PATCH] Add org.selinux.config.selinux.policy for use with policykit
 and pk_exec

---
 .../gui/org.selinux.config.selinux.policy     | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 policycoreutils/gui/org.selinux.config.selinux.policy

diff --git a/policycoreutils/gui/org.selinux.config.selinux.policy b/policycoreutils/gui/org.selinux.config.selinux.policy
new file mode 100644
index 00000000..fb2adf64
--- /dev/null
+++ b/policycoreutils/gui/org.selinux.config.selinux.policy
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC
+"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+"http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
+<policyconfig>
+
+ <vendor>System Config SELinux</vendor>
+ <vendor_url>http://fedorahosted.org/system-config-selinux</vendor_url>
+
+ <action id="org.selinux.config.pkexec.run">
+    <description>Run System Config SELinux</description>
+    <message>Authentication is required to run system-config-selinux</message>
+    <icon_name>system-selinux</icon_name>
+    <defaults>
+     <allow_any>no</allow_any>
+     <allow_inactive>no</allow_inactive>
+     <allow_active>auth_admin</allow_active>
+    </defaults>
+    <annotate key="org.freedesktop.policykit.exec.path">/usr/share/system-config-selinux/system-config-selinux.py</annotate>
+    <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
+ </action>
+</policyconfig>