From: jason@perfinion.com (Jason Zaman)
Date: Tue, 31 Oct 2017 13:37:06 +0800
Subject: [refpolicy] [PATCH 4/5] userdomain: allow admin to rw tape storage
In-Reply-To: <20171031053707.6893-1-jason@perfinion.com>
References: <20171031053707.6893-1-jason@perfinion.com>
Message-ID: <20171031053707.6893-4-jason@perfinion.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

---
 policy/modules/system/userdomain.if | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 20b2391e..49eff3a6 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1230,6 +1230,8 @@ template(`userdom_admin_user_template',`
 	fs_set_all_quotas($1_t)
 	fs_exec_noxattr($1_t)
 
+	storage_read_tape($1_t)
+	storage_write_tape($1_t)
 	storage_raw_read_removable_device($1_t)
 	storage_raw_write_removable_device($1_t)
 
-- 
2.13.6