diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if index 9533b67..b4c78c7 100644 --- a/policy/modules/admin/alsa.if +++ b/policy/modules/admin/alsa.if @@ -76,6 +76,26 @@ interface(`alsa_read_rw_config',` ######################################## ## +## Manage alsa writable config files. +## +## +## +## Domain allowed access. +## +## +# +interface(`alsa_manage_rw_config',` + gen_require(` + type alsa_etc_rw_t; + ') + + allow $1 alsa_etc_rw_t:dir list_dir_perms; + manage_files_pattern($1, alsa_etc_rw_t, alsa_etc_rw_t) + read_lnk_files_pattern($1, alsa_etc_rw_t, alsa_etc_rw_t) +') + +######################################## +## ## Read alsa lib files. ## ## diff --git a/policy/modules/admin/alsa.te b/policy/modules/admin/alsa.te index bc060fc..8bb02f4 100644 --- a/policy/modules/admin/alsa.te +++ b/policy/modules/admin/alsa.te @@ -41,6 +41,8 @@ files_search_var_lib(alsa_t) kernel_read_system_state(alsa_t) +term_dontaudit_use_console(alsa_t) + dev_read_sound(alsa_t) dev_write_sound(alsa_t) dev_read_sysfs(alsa_t)