add filetrans_home_content to alsa data

diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if
index 139267933a70a7458eb3b0c24ddb507c890ef1a5..c94911dda58ab0c77c1aec70069e312f745ca22b 100644 (file)
--- a/policy/modules/admin/alsa.if
+++ b/policy/modules/admin/alsa.if
@@ -206,3 +206,21 @@ interface(`alsa_read_lib',`
        files_search_var_lib($1)
        read_files_pattern($1, alsa_var_lib_t, alsa_var_lib_t)
 ')
+
+########################################
+## <summary>
+##     Transition to alsa named content
+## </summary>
+## <param name="domain">
+##     <summary>
+##      Domain allowed access.
+##     </summary>
+## </param>
+#
+interface(`alsa_filetrans_named_content',`
+       gen_require(`
+               type alsa_home_t;
+       ')
+
+       userdom_user_home_dir_filetrans($1, alsa_home_t, file, ".asoundrc")
+')

diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
index 25478dc0dde1bd824feff16eb775127f8fec3ad2..f88b087301b41dfcd0046093ffa34faf0d04029f 100644 (file)
--- a/policy/modules/roles/unconfineduser.te
+++ b/policy/modules/roles/unconfineduser.te
@@ -244,6 +244,7 @@ optional_policy(`
 
 optional_policy(`
        alsa_run(unconfined_t, unconfined_r)
+       alsa_filetrans_named_content(unconfined_t)
 ')
 
 optional_policy(`

diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 0bfa8641e1283429eee1131aaed3939db46ed818..6bd7bd2db3fe4db82825a82a85020849f9993adb 100644 (file)
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -675,6 +675,7 @@ template(`userdom_common_user_template',`
                alsa_read_rw_config($1_usertype)
                alsa_manage_home_files($1_t)
                alsa_relabel_home_files($1_t)
+               alsa_filetrans_named_content($1_t)
        ')
 
        optional_policy(`