From c5e7db7a714d6879a6fb816dd2fb0865279b9e50 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Wed, 15 Sep 2010 12:44:59 +0200 Subject: [PATCH] Allow mpd_admin to manage mpd tmpfs content. Signed-off-by: Dominick Grift --- policy/modules/services/mpd.if | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/services/mpd.if b/policy/modules/services/mpd.if index 2f527226..5599d14a 100644 --- a/policy/modules/services/mpd.if +++ b/policy/modules/services/mpd.if @@ -246,6 +246,7 @@ interface(`mpd_admin',` type mpd_data_t; type mpd_log_t; type mpd_var_lib_t; + type mpd_tmpfs_t; ') allow $1 mpd_t:process { ptrace signal_perms }; @@ -267,4 +268,6 @@ interface(`mpd_admin',` admin_pattern($1, mpd_log_t) + fs_search_tmpfs($1) + admin_pattern($1, mpd_tmpfs_t) ')