From aa5baa96ed64733d186444de72e7d5d48c3cd9cc Mon Sep 17 00:00:00 2001
From: Dominick Grift <domg472@gmail.com>
Date: Wed, 15 Sep 2010 12:23:05 +0200
Subject: [PATCH] Allow icecast_admin to ptrace and signal the icecast_t
 domain.

Signed-off-by: Dominick Grift <domg472@gmail.com>
---
 policy/modules/services/icecast.if | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/services/icecast.if b/policy/modules/services/icecast.if
index ecab47ab..3aa86f30 100644
--- a/policy/modules/services/icecast.if
+++ b/policy/modules/services/icecast.if
@@ -173,6 +173,7 @@ interface(`icecast_admin',`
 		type icecast_t, icecast_initrc_exec_t;
 	')
 
+	allow $1 icecast_t:process { ptrace signal_perms };
 	ps_process_pattern($1, icecast_t)
 
 	# Allow icecast_t to restart the apache service