From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 14 Jul 2009 08:50:31 -0400
Subject: [refpolicy] Debian puts alsa config files in a different
 location
In-Reply-To: <87hbxwjvc7.fsf@anzu.internal.golden-gryphon.com>
References: <87hbxwjvc7.fsf@anzu.internal.golden-gryphon.com>
Message-ID: <1247575831.31521.40.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Wed, 2009-07-01 at 11:07 -0400, Manoj Srivastava wrote:

This doesn't apply.  The var line doesn't seem necessary since there is
a /var/lib/alsa(/.*) line upstream.  Can you update and check to see if
that works?

In this case, I'd keep the /usr/share/alsa lines you want to add in a
distro_debian since they seem to be an odd location for a rw config
file.

> diff --git a/policy/modules/admin/alsa.fc b/policy/modules/admin/alsa.fc
> index 545a817..d197a6f 100644
> --- a/policy/modules/admin/alsa.fc
> +++ b/policy/modules/admin/alsa.fc
> @@ -1,9 +1,15 @@
>  /bin/alsaunmute                --      gen_context(system_u:object_r:alsa_exec_t,s0)
> 
> -/etc/alsa/asound\.state --     gen_context(system_u:object_r:alsa_etc_rw_t,s0)
>  /etc/alsa/pcm(/.*)?            gen_context(system_u:object_r:alsa_etc_rw_t,s0)
>  /etc/asound(/.*)?              gen_context(system_u:object_r:alsa_etc_rw_t,s0)
> +ifdef(`distro_debian', `
> +/var/lib/alsa/asound\.state    gen_context(system_u:object_r:alsa_etc_rw_t,s0)
> +/usr/share/alsa/alsa\.conf     gen_context(system_u:object_r:alsa_etc_rw_t,s0)
> +/usr/share/alsa/pcm(/.*)?            gen_context(system_u:object_r:alsa_etc_rw_t,s0)
> +', `
> +/etc/alsa/asound\.state --    gen_context(system_u:object_r:alsa_etc_rw_t,s0)
>  /etc/asound\.state     --      gen_context(system_u:object_r:alsa_etc_rw_t,s0)
> +')
> 
>  /sbin/alsactl          --      gen_context(system_u:object_r:alsa_exec_t,s0)
>  /sbin/salsa            --      gen_context(system_u:object_r:alsa_exec_t,s0)

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150