[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

[Jason Zaman]

commit:     227d4173a648167242aef6f7243eda3788c88304
Author:     Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Sun Sep 11 13:01:55 2016 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Oct  3 06:06:32 2016 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=227d4173

pulseaudio: Move interface definitions.

 policy/modules/contrib/pulseaudio.if | 76 ++++++++++++++++++------------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/policy/modules/contrib/pulseaudio.if 
b/policy/modules/contrib/pulseaudio.if
index 11238f2..af0f950 100644
--- a/policy/modules/contrib/pulseaudio.if
+++ b/policy/modules/contrib/pulseaudio.if
@@ -146,6 +146,44 @@ interface(`pulseaudio_signull',`
        allow $1 pulseaudio_t:process signull;
 ')
 
+########################################
+## <summary>
+##     Use file descriptors for
+##     pulseaudio.
+## </summary>
+## <param name="domain">
+##     <summary>
+##     Domain allowed access.
+##     </summary>
+## </param>
+#
+interface(`pulseaudio_use_fds',`
+       gen_require(`
+               type pulseaudio_t;
+       ')
+
+       allow $1 pulseaudio_t:fd use;
+')
+
+########################################
+## <summary>
+##     Do not audit attempts to use the
+##     file descriptors for pulseaudio.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`pulseaudio_dontaudit_use_fds',`
+       gen_require(`
+               type pulseaudio_t;
+       ')
+
+       dontaudit $1 pulseaudio_t:fd use;
+')
+
 #####################################
 ## <summary>
 ##     Connect to pulseaudio with a unix
@@ -410,41 +448,3 @@ interface(`pulseaudio_rw_tmpfs_files',`
        fs_search_tmpfs($1)
        rw_files_pattern($1, pulseaudio_tmpfs_t, pulseaudio_tmpfs_t)
 ')
-
-########################################
-## <summary>
-##     Use file descriptors for
-##     pulseaudio.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed access.
-##     </summary>
-## </param>
-#
-interface(`pulseaudio_use_fds',`
-       gen_require(`
-               type pulseaudio_t;
-       ')
-
-       allow $1 pulseaudio_t:fd use;
-')
-
-########################################
-## <summary>
-##     Do not audit attempts to use the
-##     file descriptors for pulseaudio.
-## </summary>
-## <param name="domain">
-##      <summary>
-##      Domain allowed access.
-##      </summary>
-## </param>
-#
-interface(`pulseaudio_dontaudit_use_fds',`
-       gen_require(`
-               type pulseaudio_t;
-       ')
-
-       dontaudit $1 pulseaudio_t:fd use;
-')