[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/roles/

[Jason Zaman]

commit:     b59466d0d951604cfdb9251a93a7daa76d648761
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Wed Aug 13 19:12:57 2014 +0000
Commit:     Jason Zaman <gentoo <AT> perfinion <DOT> com>
CommitDate: Fri Aug 15 13:38:01 2014 +0000
URL:        
http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=b59466d0

Allow sysadm_t to manage salt master and minion

---
 policy/modules/roles/sysadm.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
index 4f85745..26591e9 100644
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@@ -551,6 +551,11 @@ ifdef(`distro_gentoo',`
        ')
 
        optional_policy(`
+               salt_admin_master(sysadm_t, sysadm_r)
+               salt_admin_minion(sysadm_t, sysadm_r)
+       ')
+
+       optional_policy(`
                # Support audit2allow, sepolgen and so on
                selinux_read_policy(sysadm_t)
        ')