From 6ae29c737847233ff2187244d77324dfb478d428 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Feb 19 2010 16:34:28 +0000
Subject: Vbetool patch from Dan Walsh.


---

diff --git a/policy/modules/admin/vbetool.te b/policy/modules/admin/vbetool.te
index 2c54053..dd445cd 100644
--- a/policy/modules/admin/vbetool.te
+++ b/policy/modules/admin/vbetool.te
@@ -1,5 +1,5 @@
 
-policy_module(vbetool, 1.4.0)
+policy_module(vbetool, 1.4.1)
 
 ########################################
 #
@@ -15,13 +15,15 @@ init_system_domain(vbetool_t, vbetool_exec_t)
 # Local policy
 #
 
-allow vbetool_t self:capability { sys_tty_config sys_admin };
+allow vbetool_t self:capability { dac_override sys_tty_config sys_admin };
 allow vbetool_t self:process execmem;
 
 dev_wx_raw_memory(vbetool_t)
 dev_read_raw_memory(vbetool_t)
 dev_rwx_zero(vbetool_t)
-dev_read_sysfs(vbetool_t)
+dev_rw_sysfs(vbetool_t)
+dev_rw_xserver_misc(vbetool_t)
+dev_rw_mtrr(vbetool_t)
 
 domain_mmap_low(vbetool_t)