From: pebenito@ieee.org (Chris PeBenito) Date: Wed, 1 Nov 2017 18:50:21 -0400 Subject: [refpolicy] [PATCH 4/5] userdomain: allow admin to rw tape storage In-Reply-To: <20171031053707.6893-4-jason@perfinion.com> References: <20171031053707.6893-1-jason@perfinion.com> <20171031053707.6893-4-jason@perfinion.com> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 10/31/2017 01:37 AM, Jason Zaman wrote: > --- > policy/modules/system/userdomain.if | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if > index 20b2391e..49eff3a6 100644 > --- a/policy/modules/system/userdomain.if > +++ b/policy/modules/system/userdomain.if > @@ -1230,6 +1230,8 @@ template(`userdom_admin_user_template',` > fs_set_all_quotas($1_t) > fs_exec_noxattr($1_t) > > + storage_read_tape($1_t) > + storage_write_tape($1_t) > storage_raw_read_removable_device($1_t) > storage_raw_write_removable_device($1_t) Merged. -- Chris PeBenito