[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/roles/

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     d81279d70b3b2ffeb584878e42ad227e81dca5cd
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sun Oct 28 17:55:24 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sun Oct 28 17:55:24 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=d81279d7

Adding admin interfaces

Adding additional administrative interfaces to the sysadm role. Using the
"bottom" of the file (with an ifdef on our distribution), hopefully making it
easier to track upstream while still manipulating our own sets.

---
 policy/modules/roles/sysadm.te |    8 ++++++++
 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
index 56163f4..a1ac439 100644
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@@ -538,6 +538,14 @@ ifndef(`distro_redhat',`
 
 ifdef(`distro_gentoo',`
 	optional_policy(`
+		dovecot_admin(sysadm_t, sysadm_r)
+	')
+
+	optional_policy(`
+		fail2ban_run_client(sysadm_t, sysadm_r)
+	')
+
+	optional_policy(`
 		shorewall_admin(sysadm_t, sysadm_r)
 	')
 ')