commit:     5572b308499e54999df84759d522779d8e4cfd0a
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Tue Dec  2 11:14:38 2014 +0000
Commit:     Jason Zaman <gentoo <AT> perfinion <DOT> com>
CommitDate: Wed Dec  3 09:30:09 2014 +0000
URL:        
http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=5572b308

Add missing roles interfaces

Some interfaces were missing from staff_r and user_r, this adds them in

---
 policy/modules/roles/staff.te      | 16 ++++++++++++++++
 policy/modules/roles/unprivuser.te | 16 ++++++++++++++++
 2 files changed, 32 insertions(+)

diff --git a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te
index 1d4b3e0..1a867f0 100644
--- a/policy/modules/roles/staff.te
+++ b/policy/modules/roles/staff.te
@@ -188,6 +188,14 @@ ifndef(`distro_redhat',`
 ifdef(`distro_gentoo',`
 
        optional_policy(`
+               android_role(staff_r, staff_t)
+       ')
+
+       optional_policy(`
+               at_role(staff_r, staff_t)
+       ')
+
+       optional_policy(`
                chromium_role(staff_r, staff_t)
        ')
 
@@ -230,4 +238,12 @@ ifdef(`distro_gentoo',`
        optional_policy(`
                skype_role(staff_r, staff_t)
        ')
+
+       optional_policy(`
+               wine_role(staff_r, staff_t)
+       ')
+
+       optional_policy(`
+               xscreensaver_role(staff_r, staff_t)
+       ')
 ')

diff --git a/policy/modules/roles/unprivuser.te 
b/policy/modules/roles/unprivuser.te
index c171833..e349a03 100644
--- a/policy/modules/roles/unprivuser.te
+++ b/policy/modules/roles/unprivuser.te
@@ -173,6 +173,14 @@ ifndef(`distro_redhat',`
 ifdef(`distro_gentoo',`
 
        optional_policy(`
+               android_role(user_r, user_t)
+       ')
+
+       optional_policy(`
+               at_role(user_r, user_t)
+       ')
+
+       optional_policy(`
                chromium_role(user_r, user_t)
        ')
 
@@ -211,4 +219,12 @@ ifdef(`distro_gentoo',`
        optional_policy(`
                skype_role(user_r, user_t)
        ')
+
+       optional_policy(`
+               wine_role(user_r, user_t)
+       ')
+
+       optional_policy(`
+               xscreensaver_role(user_r, user_t)
+       ')
 ')

Reply via email to