From: guido@trentalancia.com (Guido Trentalancia) Date: Mon, 16 Apr 2018 11:39:28 +0200 Subject: [refpolicy] [PATCH 1/2 v2] base: staff role runs ntp In-Reply-To: <8b73f7c2-e089-f351-3e60-77a78d399afe@ieee.org> References: <1523723263.3462.3.camel@trentalancia.com> <8b73f7c2-e089-f351-3e60-77a78d399afe@ieee.org> Message-ID: <1523871568.10266.4.camel@trentalancia.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Update the staff role policy so that it allows to run ntpdate. This is needed for example to start ntpdate from the crontab. Signed-off-by: Guido Trentalancia --- policy/modules/roles/staff.te | 4 ++++ 1 file changed, 4 insertions(+) diff -pru a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te --- a/policy/modules/roles/staff.te 2017-09-29 19:01:27.985455758 +0200 +++ b/policy/modules/roles/staff.te 2018-04-14 18:14:52.850666408 +0200 @@ -32,6 +32,10 @@ optional_policy(` ') optional_policy(` + ntp_run_ntpdate(staff_t, staff_r) +') + +optional_policy(` postgresql_role(staff_r, staff_t) ')