From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Tue, 23 Aug 2011 15:46:38 +0200 Subject: [refpolicy] [PATCH 11/11] Allow portage to call GnuPG In-Reply-To: <20110823133643.GA857@siphos.be> References: <20110823133643.GA857@siphos.be> Message-ID: <20110823134637.GL857@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Allow the portage domain to transition to the gpg_t domain (used for instance when validating signed manifests) Signed-off-by: Sven Vermeulen --- policy/modules/admin/portage.te | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te index beeeb81..af2d00e 100644 --- a/policy/modules/admin/portage.te +++ b/policy/modules/admin/portage.te @@ -192,6 +192,10 @@ optional_policy(` ') optional_policy(` + gpg_domtrans(portage_t) +') + +optional_policy(` modutils_domtrans_depmod(portage_t) modutils_domtrans_update_mods(portage_t) #dontaudit update_modules_t portage_tmp_t:dir search_dir_perms; -- 1.7.3.4