From: martin@martinorr.name (Martin Orr)
Date: Thu, 13 Nov 2008 17:57:12 +0000
Subject: [refpolicy] pty creation type
Message-ID: <491C6A78.6070104@martinorr.name>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

All my ptys are now created as devpts_t.  I think this got lost in the ubac
conversion.

Index: policy/modules/system/userdomain.if
===================================================================
--- policy/modules/system/userdomain.if.orig
+++ policy/modules/system/userdomain.if
@@ -57,6 +57,7 @@
 	dontaudit $1_t self:socket create;

 	allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms };
+	term_create_pty($1_t, user_devpts_t)
 	# avoid annoying messages on terminal hangup on role change
 	dontaudit $1_t user_devpts_t:chr_file ioctl;


-- 
Martin Orr