From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Thu, 15 Aug 2013 20:15:10 +0200 Subject: [refpolicy] [PATCH 2/3] Provide alsa_write_lib interface In-Reply-To: <1376590511-7480-1-git-send-email-sven.vermeulen@siphos.be> References: <1376590511-7480-1-git-send-email-sven.vermeulen@siphos.be> Message-ID: <1376590511-7480-3-git-send-email-sven.vermeulen@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com The initrc_t domain needs write privileges in the /var/lib/alsa location to store the asound.state file generated through the alsa init script. To prepare for this, create the alsa_write_lib interface. Signed-off-by: Sven Vermeulen --- alsa.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/alsa.if b/alsa.if index 708b743..ca8d8cf 100644 --- a/alsa.if +++ b/alsa.if @@ -256,3 +256,22 @@ interface(`alsa_read_lib',` files_search_var_lib($1) read_files_pattern($1, alsa_var_lib_t, alsa_var_lib_t) ') + +######################################### +## +## Write Alsa lib files. +## +## +## +## Domain allowed access. +## +## +# +interface(`alsa_write_lib',` + gen_require(` + type alsa_var_lib_t; + ') + + files_search_var_lib($1) + write_files_pattern($1, alsa_var_lib_t, alsa_var_lib_t) +') -- 1.8.1.5