From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Fri, 6 Dec 2013 09:50:56 -0500 Subject: [refpolicy] [PATCH 35/39] users: calls pulseaudio_role() for restricted xwindows users and staff_t/user_t In-Reply-To: <1383990320-3340-35-git-send-email-dominick.grift@gmail.com> References: <1383990320-3340-1-git-send-email-dominick.grift@gmail.com> <1383990320-3340-35-git-send-email-dominick.grift@gmail.com> Message-ID: <52A1E450.30101@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/09/13 04:45, Dominick Grift wrote: > Signed-off-by: Dominick Grift > --- > policy/modules/roles/staff.te | 4 ++++ > policy/modules/roles/unprivuser.te | 4 ++++ > policy/modules/system/userdomain.if | 4 ++++ > 3 files changed, 12 insertions(+) > > diff --git a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te > index 0fef1fc..5fd339b 100644 > --- a/policy/modules/roles/staff.te > +++ b/policy/modules/roles/staff.te > @@ -82,6 +82,10 @@ ifndef(`distro_redhat',` > optional_policy(` > gnome_role_template(staff, staff_r, staff_t) > ') > + > + optional_policy(` > + pulseaudio_role(staff_r, staff_t) > + ') > ') > > optional_policy(` > diff --git a/policy/modules/roles/unprivuser.te b/policy/modules/roles/unprivuser.te > index 6d77e81..acc9ff7 100644 > --- a/policy/modules/roles/unprivuser.te > +++ b/policy/modules/roles/unprivuser.te > @@ -55,6 +55,10 @@ ifndef(`distro_redhat',` > optional_policy(` > gnome_role_template(user, user_r, user_t) > ') > + > + optional_policy(` > + pulseaudio_role(user_r, user_t) > + ') > ') > > optional_policy(` > diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if > index 189f786..dc03698 100644 > --- a/policy/modules/system/userdomain.if > +++ b/policy/modules/system/userdomain.if > @@ -946,6 +946,10 @@ template(`userdom_restricted_xwindows_user_template',` > gnome_role_template($1, $1_r, $1_t) > wm_role_template($1, $1_r, $1_t) > ') > + > + optional_policy(` > + pulseaudio_role($1_r, $1_t) > + ') > ') > Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com