From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 7 Sep 2012 08:58:50 -0400 Subject: [refpolicy] [PATCH 4/9] Quota policy adjustments: * Allow quota_t to load kernel modules In-Reply-To: <1346794648-27101-4-git-send-email-bigon@debian.org> References: <1346794648-27101-1-git-send-email-bigon@debian.org> <1346794648-27101-4-git-send-email-bigon@debian.org> Message-ID: <5049EF8A.5050605@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 09/04/12 17:37, Laurent Bigonville wrote: > From: Mika Pfl??ger > > --- > quota.te | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/quota.te b/quota.te > index 5dd42f5..5ec1cf3 100644 > --- a/quota.te > +++ b/quota.te > @@ -20,6 +20,7 @@ files_type(quota_flag_t) > # Local policy > # > > +kernel_request_load_module(quota_t) > allow quota_t self:capability { sys_admin dac_override }; > dontaudit quota_t self:capability sys_tty_config; > allow quota_t self:process signal_perms; Merged. Moved the line to the appropriate place. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com