2017-05-13 21:15:27

by guido

Subject: [refpolicy] [PATCH 1/2] base: role changes for the new libmtp module

This is the base part of the policy needed to support libmtp (an
Initiator implementation of the Media Transfer Protocol).

Signed-off-by: Guido Trentalancia <[email protected]>
---
policy/modules/roles/staff.te | 4 ++++
policy/modules/roles/sysadm.te | 4 ++++
policy/modules/roles/unprivuser.te | 4 ++++
3 files changed, 12 insertions(+)

--- a/policy/modules/roles/staff.te 2017-02-04 19:30:19.000000000 +0100
+++ b/policy/modules/roles/staff.te 2017-05-13 21:23:35.078046056 +0200
@@ -125,6 +125,10 @@ ifndef(`distro_redhat',`
')

optional_policy(`
+ libmtp_role(staff_r, staff_t)
+ ')
+
+ optional_policy(`
lockdev_role(staff_r, staff_t)
')

--- a/policy/modules/roles/sysadm.te 2017-02-04 19:30:20.000000000 +0100
+++ b/policy/modules/roles/sysadm.te 2017-05-13 21:24:59.087045713 +0200
@@ -553,6 +553,10 @@ optional_policy(`
')

optional_policy(`
+ libmtp_role(sysadm_r, sysadm_t)
+')
+
+optional_policy(`
libs_run_ldconfig(sysadm_t, sysadm_r)
')

--- a/policy/modules/roles/unprivuser.te 2017-02-04 19:30:19.000000000 +0100
+++ b/policy/modules/roles/unprivuser.te 2017-05-13 21:22:22.837046352 +0200
@@ -98,6 +98,10 @@ ifndef(`distro_redhat',`
')

optional_policy(`
+ libmtp_role(user_r, user_t)
+ ')
+
+ optional_policy(`
lockdev_role(user_r, user_t)
')

2017-05-23 00:21:40

by Chris PeBenito

Subject: [refpolicy] [PATCH 1/2] base: role changes for the new libmtp module

On 05/13/2017 05:15 PM, Guido Trentalancia via refpolicy wrote:
> This is the base part of the policy needed to support libmtp (an
> Initiator implementation of the Media Transfer Protocol).
>
> Signed-off-by: Guido Trentalancia <[email protected]>
> ---
> policy/modules/roles/staff.te | 4 ++++
> policy/modules/roles/sysadm.te | 4 ++++
> policy/modules/roles/unprivuser.te | 4 ++++
> 3 files changed, 12 insertions(+)
>
> --- a/policy/modules/roles/staff.te 2017-02-04 19:30:19.000000000 +0100
> +++ b/policy/modules/roles/staff.te 2017-05-13 21:23:35.078046056 +0200
> @@ -125,6 +125,10 @@ ifndef(`distro_redhat',`
> ')
>
> optional_policy(`
> + libmtp_role(staff_r, staff_t)
> + ')
> +
> + optional_policy(`
> lockdev_role(staff_r, staff_t)
> ')
>
> --- a/policy/modules/roles/sysadm.te 2017-02-04 19:30:20.000000000 +0100
> +++ b/policy/modules/roles/sysadm.te 2017-05-13 21:24:59.087045713 +0200
> @@ -553,6 +553,10 @@ optional_policy(`
> ')
>
> optional_policy(`
> + libmtp_role(sysadm_r, sysadm_t)
> +')
> +
> +optional_policy(`
> libs_run_ldconfig(sysadm_t, sysadm_r)
> ')
>
> --- a/policy/modules/roles/unprivuser.te 2017-02-04 19:30:19.000000000 +0100
> +++ b/policy/modules/roles/unprivuser.te 2017-05-13 21:22:22.837046352 +0200
> @@ -98,6 +98,10 @@ ifndef(`distro_redhat',`
> ')
>
> optional_policy(`
> + libmtp_role(user_r, user_t)
> + ')
> +
> + optional_policy(`
> lockdev_role(user_r, user_t)
> ')

Merged.

--
Chris PeBenito