[gentoo-commits] proj/hardened-refpolicy:salt commit in: policy/modules/roles/

[Sven Vermeulen]

commit:     22d4aebb9d136805bf2c51093e4c2949589a8afe
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Wed Aug 13 19:12:57 2014 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Fri Aug 15 10:40:24 2014 +0000
URL:        
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=22d4aebb

Allow sysadm_t to manage salt master and minion

---
 policy/modules/roles/sysadm.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
index 4f85745..26591e9 100644
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@@ -551,6 +551,11 @@ ifdef(`distro_gentoo',`
        ')
 
        optional_policy(`
+               salt_admin_master(sysadm_t, sysadm_r)
+               salt_admin_minion(sysadm_t, sysadm_r)
+       ')
+
+       optional_policy(`
                # Support audit2allow, sepolgen and so on
                selinux_read_policy(sysadm_t)
        ')