From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Sun, 6 Feb 2011 15:27:44 +0100 Subject: [refpolicy] [PATCH 1/1] Allow modprobe to request module load Message-ID: <20110206142743.GA10802@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com The modprobe utility is sometimes used (for instance for ALSA) to request the Linux kernel to load a module (through aliases) rather than explicitly loading the module. Signed-off-by: Sven Vermeulen --- policy/modules/system/modutils.te | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/policy/modules/system/modutils.te b/policy/modules/system/modutils.te index 74a4466..882b50c 100644 --- a/policy/modules/system/modutils.te +++ b/policy/modules/system/modutils.te @@ -119,6 +119,7 @@ read_files_pattern(insmod_t, modules_dep_t, modules_dep_t) can_exec(insmod_t, insmod_exec_t) kernel_load_module(insmod_t) +kernel_request_load_module(insmod_t) kernel_read_system_state(insmod_t) kernel_read_network_state(insmod_t) kernel_write_proc_files(insmod_t) -- 1.7.3.4