[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

[Jason Zaman]

commit:     7c26bbe13b7092ebfcaf064de9f464bca877a98c
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Tue Oct 31 05:37:06 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Nov  5 06:38:35 2017 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=7c26bbe1

userdomain: allow admin to rw tape storage

 policy/modules/system/userdomain.if | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/userdomain.if 
b/policy/modules/system/userdomain.if
index bc8052e6..cb183a90 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1251,6 +1251,8 @@ template(`userdom_admin_user_template',`
        fs_set_all_quotas($1_t)
        fs_exec_noxattr($1_t)
 
+       storage_read_tape($1_t)
+       storage_write_tape($1_t)
        storage_raw_read_removable_device($1_t)
        storage_raw_write_removable_device($1_t)