From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id A2D02138200 for ; Tue, 28 Aug 2012 17:30:15 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3AC01E049A; Tue, 28 Aug 2012 17:28:58 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 0D26BE049A for ; Tue, 28 Aug 2012 17:28:57 +0000 (UTC) Received: from hornbill.gentoo.org (hornbill.gentoo.org [94.100.119.163]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 6151D33D8BC for ; Tue, 28 Aug 2012 17:28:57 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by hornbill.gentoo.org (Postfix) with ESMTP id 4C86DE544B for ; Tue, 28 Aug 2012 17:28:55 +0000 (UTC) From: "Sven Vermeulen" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" Message-ID: <1345916817.8968bc4b5c3e460081fa55ca0cc12d547d04ec68.SwifT@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/roles/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/roles/sysadm.te X-VCS-Directories: policy/modules/roles/ X-VCS-Committer: SwifT X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 8968bc4b5c3e460081fa55ca0cc12d547d04ec68 X-VCS-Branch: master Date: Tue, 28 Aug 2012 17:28:55 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 73da0044-09e0-41b3-bce1-d0034fa02b03 X-Archives-Hash: 1ad78f4883ce19b6758e7ca1a5d19093 commit: 8968bc4b5c3e460081fa55ca0cc12d547d04ec68 Author: Sven Vermeulen siphos be> AuthorDate: Sat Aug 25 17:46:57 2012 +0000 Commit: Sven Vermeulen siphos be> CommitDate: Sat Aug 25 17:46:57 2012 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=8968bc4b Allow sysadm to manage ntp domain Since the ntp init script is a named one, allow the sysadm to administer the ntp domain so he can (re)start the init scripts (amongst other things). --- policy/modules/roles/sysadm.te | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te index 1b6274e..7f52e17 100644 --- a/policy/modules/roles/sysadm.te +++ b/policy/modules/roles/sysadm.te @@ -269,6 +269,10 @@ optional_policy(` ') optional_policy(` + ntp_admin(sysadm_t, sysadm_r) +') + +optional_policy(` oav_run_update(sysadm_t, sysadm_r) ')