From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Fri, 7 Sep 2012 08:58:50 -0400
Subject: [refpolicy] [PATCH 4/9] Quota policy adjustments: * Allow
 quota_t to load kernel modules
In-Reply-To: <1346794648-27101-4-git-send-email-bigon@debian.org>
References: <1346794648-27101-1-git-send-email-bigon@debian.org>
	<1346794648-27101-4-git-send-email-bigon@debian.org>
Message-ID: <5049EF8A.5050605@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 09/04/12 17:37, Laurent Bigonville wrote:
> From: Mika Pfl??ger <debian@mikapflueger.de>
> 
> ---
>  quota.te |    1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/quota.te b/quota.te
> index 5dd42f5..5ec1cf3 100644
> --- a/quota.te
> +++ b/quota.te
> @@ -20,6 +20,7 @@ files_type(quota_flag_t)
>  # Local policy
>  #
>  
> +kernel_request_load_module(quota_t)
>  allow quota_t self:capability { sys_admin dac_override };
>  dontaudit quota_t self:capability sys_tty_config;
>  allow quota_t self:process signal_perms;
 
Merged.  Moved the line to the appropriate place.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com