commit: eac63cf59c69b655c2a02c383a36a39d8a107f43 Author: Jason Zaman <jason <AT> perfinion <DOT> com> AuthorDate: Mon Mar 23 14:55:32 2015 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Mon Mar 23 14:55:32 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=eac63cf5
alsa: gentoo saves state files in /var/lib/alsa/oss/CardName alsa_read/write_lib have permission on files, add in permission for dirs too since gentoo's init script saves things in subdirs policy/modules/contrib/alsa.if | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/policy/modules/contrib/alsa.if b/policy/modules/contrib/alsa.if index 8f25112..cfd5a6c 100644 --- a/policy/modules/contrib/alsa.if +++ b/policy/modules/contrib/alsa.if @@ -255,6 +255,11 @@ interface(`alsa_read_lib',` files_search_var_lib($1) read_files_pattern($1, alsa_var_lib_t, alsa_var_lib_t) + + ifdef(`distro_gentoo',` + # gentoo saves the files in /var/lib/alsa/oss/CardName + list_dirs_pattern($1, alsa_var_lib_t, alsa_var_lib_t) + ') ') ######################################### @@ -274,6 +279,11 @@ interface(`alsa_write_lib',` files_search_var_lib($1) write_files_pattern($1, alsa_var_lib_t, alsa_var_lib_t) + + ifdef(`distro_gentoo',` + # gentoo saves the files in /var/lib/alsa/oss/CardName + write_dirs_pattern($1, alsa_var_lib_t, alsa_var_lib_t) + ') ') # Gentoo specific for now, but cannot use ifdef distro_gentoo in an interface