2014-07-05 16:19:14

by sven.vermeulen

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/1] Enable asound.state.lock support

>From alsa-utils-1.0.28 onwards, the alsactl command will use the
asound.state.lock file when managing alsa state operations.

Signed-off-by: Sven Vermeulen <[email protected]>
---
alsa.fc | 2 ++
alsa.te | 6 ++++++
2 files changed, 8 insertions(+)

diff --git a/alsa.fc b/alsa.fc
index 33d9d31..6c3c0ba 100644
--- a/alsa.fc
+++ b/alsa.fc
@@ -24,3 +24,5 @@ ifdef(`distro_debian',`
/usr/share/alsa/pcm(/.*)? gen_context(system_u:object_r:alsa_etc_rw_t,s0)

/var/lib/alsa(/.*)? gen_context(system_u:object_r:alsa_var_lib_t,s0)
+
+/var/lock/asound\.state\.lock -- gen_context(system_u:object_r:alsa_var_lock_t,s0)
diff --git a/alsa.te b/alsa.te
index 814b426..6f7f2f9 100644
--- a/alsa.te
+++ b/alsa.te
@@ -24,6 +24,9 @@ files_tmpfs_file(alsa_tmpfs_t)
type alsa_var_lib_t;
files_type(alsa_var_lib_t)

+type alsa_var_lock_t;
+files_lock_file(alsa_var_lock_t)
+
type alsa_home_t;
userdom_user_home_content(alsa_home_t)

@@ -57,6 +60,9 @@ fs_tmpfs_filetrans(alsa_t, alsa_tmpfs_t, file)
manage_dirs_pattern(alsa_t, alsa_var_lib_t, alsa_var_lib_t)
manage_files_pattern(alsa_t, alsa_var_lib_t, alsa_var_lib_t)

+allow alsa_t alsa_var_lock_t:file manage_file_perms;
+files_lock_filetrans(alsa_t, alsa_var_lock_t, file);
+
kernel_read_system_state(alsa_t)

corecmd_exec_bin(alsa_t)
--
1.8.5.5


2014-07-08 12:52:05

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [PATCH 1/1] Enable asound.state.lock support

On 7/5/2014 12:19 PM, Sven Vermeulen wrote:
>>From alsa-utils-1.0.28 onwards, the alsactl command will use the
> asound.state.lock file when managing alsa state operations.

Merged.



> Signed-off-by: Sven Vermeulen <[email protected]>
> ---
> alsa.fc | 2 ++
> alsa.te | 6 ++++++
> 2 files changed, 8 insertions(+)
>
> diff --git a/alsa.fc b/alsa.fc
> index 33d9d31..6c3c0ba 100644
> --- a/alsa.fc
> +++ b/alsa.fc
> @@ -24,3 +24,5 @@ ifdef(`distro_debian',`
> /usr/share/alsa/pcm(/.*)? gen_context(system_u:object_r:alsa_etc_rw_t,s0)
>
> /var/lib/alsa(/.*)? gen_context(system_u:object_r:alsa_var_lib_t,s0)
> +
> +/var/lock/asound\.state\.lock -- gen_context(system_u:object_r:alsa_var_lock_t,s0)
> diff --git a/alsa.te b/alsa.te
> index 814b426..6f7f2f9 100644
> --- a/alsa.te
> +++ b/alsa.te
> @@ -24,6 +24,9 @@ files_tmpfs_file(alsa_tmpfs_t)
> type alsa_var_lib_t;
> files_type(alsa_var_lib_t)
>
> +type alsa_var_lock_t;
> +files_lock_file(alsa_var_lock_t)
> +
> type alsa_home_t;
> userdom_user_home_content(alsa_home_t)
>
> @@ -57,6 +60,9 @@ fs_tmpfs_filetrans(alsa_t, alsa_tmpfs_t, file)
> manage_dirs_pattern(alsa_t, alsa_var_lib_t, alsa_var_lib_t)
> manage_files_pattern(alsa_t, alsa_var_lib_t, alsa_var_lib_t)
>
> +allow alsa_t alsa_var_lock_t:file manage_file_perms;
> +files_lock_filetrans(alsa_t, alsa_var_lock_t, file);
> +
> kernel_read_system_state(alsa_t)
>
> corecmd_exec_bin(alsa_t)
>

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com