From: pebenito@ieee.org (Chris PeBenito)
Date: Sun, 4 Jun 2017 20:32:51 -0400
Subject: [refpolicy] [PATCH v2 2/6] consolekit: Add support for
	consolekit2
In-Reply-To: <20170604152350.27036-2-jason@perfinion.com>
References: <20170604152350.27036-1-jason@perfinion.com>
	<20170604152350.27036-2-jason@perfinion.com>
Message-ID: <a45ae474-56c7-10e9-ed86-a955923efb1f@ieee.org>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 06/04/2017 11:23 AM, Jason Zaman wrote:
> setattr chr_files is to setting dev nodes on login
> rw sysfs and devicekit for suspend
> connect to cgmanager to track sessions with cgroups
> ---
>  consolekit.te | 12 +++++++++++-
>  1 file changed, 11 insertions(+), 1 deletion(-)
>
> diff --git a/consolekit.te b/consolekit.te
> index c99a6cb..c3c58f7 100644
> --- a/consolekit.te
> +++ b/consolekit.te
> @@ -53,7 +53,8 @@ corecmd_exec_bin(consolekit_t)
>  corecmd_exec_shell(consolekit_t)
>
>  dev_read_urand(consolekit_t)
> -dev_read_sysfs(consolekit_t)
> +dev_rw_sysfs(consolekit_t)
> +dev_setattr_all_chr_files(consolekit_t)
>
>  domain_read_all_domains_state(consolekit_t)
>  domain_use_interactive_fds(consolekit_t)
> @@ -104,6 +105,10 @@ tunable_policy(`use_samba_home_dirs',`
>  ')
>
>  optional_policy(`
> +	cgmanager_stream_connect(consolekit_t)
> +')
> +
> +optional_policy(`
>  	dbus_read_lib_files(consolekit_t)
>  	dbus_system_domain(consolekit_t, consolekit_exec_t)
>
> @@ -125,6 +130,10 @@ optional_policy(`
>  ')
>
>  optional_policy(`
> +	devicekit_manage_log_files(consolekit_t)
> +')
> +
> +optional_policy(`
>  	hal_ptrace(consolekit_t)
>  ')
>
> @@ -156,6 +165,7 @@ optional_policy(`
>  optional_policy(`
>  	udev_domtrans(consolekit_t)
>  	udev_read_db(consolekit_t)
> +	udev_read_pid_files(consolekit_t)
>  	udev_signal(consolekit_t)
>  ')

Merged.

-- 
Chris PeBenito