[refpolicy] [PATCH 1/2] base: role changes for the new libmtp module

Guido Trentalancia guido at trentalancia.net
Sat May 13 21:15:27 UTC 2017


This is the base part of the policy needed to support libmtp (an
Initiator implementation of the Media Transfer Protocol).

Signed-off-by: Guido Trentalancia <guido at trentalancia.net>
---
 policy/modules/roles/staff.te      |    4 ++++
 policy/modules/roles/sysadm.te     |    4 ++++
 policy/modules/roles/unprivuser.te |    4 ++++
 3 files changed, 12 insertions(+)

--- a/policy/modules/roles/staff.te	2017-02-04 19:30:19.000000000 +0100
+++ b/policy/modules/roles/staff.te	2017-05-13 21:23:35.078046056 +0200
@@ -125,6 +125,10 @@ ifndef(`distro_redhat',`
 	')
 
 	optional_policy(`
+		libmtp_role(staff_r, staff_t)
+	')
+
+	optional_policy(`
 		lockdev_role(staff_r, staff_t)
 	')
 
--- a/policy/modules/roles/sysadm.te	2017-02-04 19:30:20.000000000 +0100
+++ b/policy/modules/roles/sysadm.te	2017-05-13 21:24:59.087045713 +0200
@@ -553,6 +553,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	libmtp_role(sysadm_r, sysadm_t)
+')
+
+optional_policy(`
 	libs_run_ldconfig(sysadm_t, sysadm_r)
 ')
 
--- a/policy/modules/roles/unprivuser.te	2017-02-04 19:30:19.000000000 +0100
+++ b/policy/modules/roles/unprivuser.te	2017-05-13 21:22:22.837046352 +0200
@@ -98,6 +98,10 @@ ifndef(`distro_redhat',`
 	')
 
 	optional_policy(`
+		libmtp_role(user_r, user_t)
+	')
+
+	optional_policy(`
 		lockdev_role(user_r, user_t)
 	')
 


More information about the refpolicy mailing list