From 19fd9301e6f21b3e94a85c8dad95d569281319e5 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Mar 21 2007 20:02:50 +0000
Subject: patch from dan to have ricci modstorage transition to lvm


---

diff --git a/policy/modules/services/ricci.te b/policy/modules/services/ricci.te
index 695bbb5..acba016 100644
--- a/policy/modules/services/ricci.te
+++ b/policy/modules/services/ricci.te
@@ -1,5 +1,5 @@
 
-policy_module(ricci,1.0.3)
+policy_module(ricci,1.0.4)
 
 ########################################
 #
@@ -445,6 +445,7 @@ optional_policy(`
 #
 
 allow ricci_modstorage_t self:process { setsched signal };
+dontaudit ricci_modstorage_t self:process ptrace;
 allow ricci_modstorage_t self:capability { mknod sys_nice };
 allow ricci_modstorage_t self:fifo_file rw_fifo_file_perms;
 allow ricci_modstorage_t self:unix_dgram_socket create_socket_perms;
@@ -494,6 +495,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	lvm_domtrans(ricci_modstorage_t)
+')
+
+optional_policy(`
 	nscd_socket_use(ricci_modstorage_t)
 ')