I would rather remove the alsa home trans from the named_content, since we will want...

Revert "More fixes for alsa and confind users"

This reverts commit 11a508156f32c6bdf4e7d96963986fabf24f9e47.

diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if
index e02a2fc5bb49d09e90b165122ec865cff11114cc..407f9f7932edb259610802e8e9bac33961fa399e 100644 (file)
--- a/policy/modules/admin/alsa.if
+++ b/policy/modules/admin/alsa.if
@@ -148,6 +148,7 @@ interface(`alsa_manage_home_files',`
 
        userdom_search_user_home_dirs($1)
        allow $1 alsa_home_t:file manage_file_perms;
+       alsa_filetrans_home_content(unpriv_userdomain)
 ')
 
 ########################################

diff --git a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te
index a1913e8d86c87b92b4cd38afd4f2d406b2d6a277..2c588ca01f70567d8ae2b5f090c0bf825cb8ddb8 100644 (file)
--- a/policy/modules/roles/staff.te
+++ b/policy/modules/roles/staff.te
@@ -57,10 +57,6 @@ optional_policy(`
        abrt_read_cache(staff_t)
 ')
 
-optional_policy(`
-    alsa_filetrans_home_content(staff_t)
-')
-
 optional_policy(`
        apache_role(staff_r, staff_t)
 ')

diff --git a/policy/modules/roles/unprivuser.te b/policy/modules/roles/unprivuser.te
index 59f013e9a091384ba69658f48f84e8bb6dac488d..50e49e685e8d9bf710b03c8a26922c7822396b32 100644 (file)
--- a/policy/modules/roles/unprivuser.te
+++ b/policy/modules/roles/unprivuser.te
@@ -26,10 +26,6 @@ optional_policy(`
        abrt_read_cache(user_t)
 ')
 
-optional_policy(`
-       alsa_filetrans_home_content(user_t)
-')
-
 optional_policy(`
        apache_role(user_r, user_t)
 ')