base: role changes for the new libmtp module

This is the base part of the policy needed to support libmtp (an
Initiator implementation of the Media Transfer Protocol).

Signed-off-by: Guido Trentalancia <guido at trentalancia.net>

policy/modules/roles/staff.te

@@ -124,6 +124,10 @@ ifndef(`distro_redhat',`
 		java_role(staff_r, staff_t)
 	')
 
+	optional_policy(`
+		libmtp_role(staff_r, staff_t)
+	')
+
 	optional_policy(`
 		lockdev_role(staff_r, staff_t)
 	')

policy/modules/roles/sysadm.te

@@ -550,6 +550,10 @@ optional_policy(`
 	ldap_admin(sysadm_t, sysadm_r)
 ')
 
+optional_policy(`
+	libmtp_role(sysadm_r, sysadm_t)
+')
+
 optional_policy(`
 	libs_run_ldconfig(sysadm_t, sysadm_r)
 ')

policy/modules/roles/unprivuser.te

@@ -97,6 +97,10 @@ ifndef(`distro_redhat',`
 		java_role(user_r, user_t)
 	')
 
+	optional_policy(`
+		libmtp_role(user_r, user_t)
+	')
+
 	optional_policy(`
 		lockdev_role(user_r, user_t)
 	')