From: sven.vermeulen@siphos.be (Sven Vermeulen)
Date: Thu, 5 Jan 2012 19:42:15 +0100
Subject: [refpolicy] New contrib policy for vdagent.
In-Reply-To: <4ED8DA17.9070306@redhat.com>
References: <4ED8DA17.9070306@redhat.com>
Message-ID: <20120105184215.GD17906@siphos.be>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Fri, Dec 02, 2011 at 09:00:55AM -0500, Daniel J Walsh wrote:
> The new spice-vdagent package provides a SPICE agent for Linux guests.
[...]
> +#####################################
> +## <summary>
> +##  Getattr on vdagent executable.
> +## </summary>
> +## <param name="domain">
> +##  <summary>
> +##	Domain allowed access.
> +##  </summary>
> +## </param>
> +#
> +interface(`vdagent_getattr_exec',`

Looking at shutdown and kudzu (those that I could find offering
similar interfaces) all name them _getattr_exec_files, so this might be
better named vdagent_getattr_exec_files instead.

Otherwise looks good.

Acked-by: Sven Vermeulen <sven.vermeulen@siphos.be>