[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/roles/

[Sven Vermeulen]

commit:     8244ab45e28841bf23a9bbea0381b6a784e289b5
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sat Aug 25 17:43:02 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sat Aug 25 17:43:02 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=8244ab45

Allow sysadmin to manage openvpn

Since the openvpn init script is a named one (openvpn_initrc_exec_t) we need to
allow sysadmin to administer the openvpn domain. Otherwise he cannot (re)start
the init scripts easily.

---
 policy/modules/roles/sysadm.te |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
index 9e9967f..1b6274e 100644
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@@ -273,6 +273,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	openvpn_admin(sysadm_t, sysadm_r)
+')
+
+optional_policy(`
 	pcmcia_run_cardctl(sysadm_t, sysadm_r)
 ')