REmove userdom_manage_home_role() pulseaudio_role()

diff --git a/policy/modules/apps/pulseaudio.if b/policy/modules/apps/pulseaudio.if
index a08cb820db814468fed6e8b273bb65d8d0a2c628..aa9e8e2732d456239fa886195af80a51a701383f 100644 (file)
--- a/policy/modules/apps/pulseaudio.if
+++ b/policy/modules/apps/pulseaudio.if
@@ -35,7 +35,6 @@ interface(`pulseaudio_role',`
        allow pulseaudio_t $2:unix_stream_socket connectto;
        allow $2 pulseaudio_t:unix_stream_socket connectto;
 
-       userdom_manage_home_role($1, pulseaudio_t)
        userdom_manage_tmp_role($1, pulseaudio_t)
        userdom_manage_tmpfs_role($1, pulseaudio_t)
 

diff --git a/policy/modules/apps/pulseaudio.te b/policy/modules/apps/pulseaudio.te
index 8522ab4419e4f15fc87e5a75c6c60fa936305745..5314e571f18ec2ddbe6fddaaefe56d2e33f06461 100644 (file)
--- a/policy/modules/apps/pulseaudio.te
+++ b/policy/modules/apps/pulseaudio.te
@@ -95,6 +95,26 @@ logging_send_syslog_msg(pulseaudio_t)
 
 miscfiles_read_localization(pulseaudio_t)
 
+tunable_policy(`use_nfs_home_dirs',`
+       fs_mount_nfs(pulseaudio_t)
+       fs_mounton_nfs(pulseaudio_t)
+       fs_manage_nfs_dirs(pulseaudio_t)
+       fs_manage_nfs_files(pulseaudio_t)
+       fs_manage_nfs_symlinks(pulseaudio_t)
+       fs_manage_nfs_named_sockets(pulseaudio_t)
+       fs_manage_nfs_named_pipes(pulseaudio_t)
+')
+
+tunable_policy(`use_samba_home_dirs',`
+       fs_mount_cifs(pulseaudio_t)
+       fs_mounton_cifs(pulseaudio_t)
+       fs_manage_cifs_dirs(pulseaudio_t)
+       fs_manage_cifs_files(pulseaudio_t)
+       fs_manage_cifs_symlinks(pulseaudio_t)
+       fs_manage_cifs_named_sockets(pulseaudio_t)
+       fs_manage_cifs_named_pipes(pulseaudio_t)
+')
+
 optional_policy(`
        alsa_read_rw_config(pulseaudio_t)
 ')