From: bigon@debian.org (Laurent Bigonville) Date: Tue, 4 Sep 2012 23:37:23 +0200 Subject: [refpolicy] [PATCH 4/9] Quota policy adjustments: * Allow quota_t to load kernel modules In-Reply-To: <1346794648-27101-1-git-send-email-bigon@debian.org> References: <1346794648-27101-1-git-send-email-bigon@debian.org> Message-ID: <1346794648-27101-4-git-send-email-bigon@debian.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com From: Mika Pfl?ger --- quota.te | 1 + 1 file changed, 1 insertion(+) diff --git a/quota.te b/quota.te index 5dd42f5..5ec1cf3 100644 --- a/quota.te +++ b/quota.te @@ -20,6 +20,7 @@ files_type(quota_flag_t) # Local policy # +kernel_request_load_module(quota_t) allow quota_t self:capability { sys_admin dac_override }; dontaudit quota_t self:capability sys_tty_config; allow quota_t self:process signal_perms; -- 1.7.10.4