subsonic: Add permissions to mmap files

[selinux.git] / subsonic / subsonic.te

diff --git a/subsonic/subsonic.te b/subsonic/subsonic.te
index 63ad0c2..0b8aa93 100644 (file)
--- a/subsonic/subsonic.te
+++ b/subsonic/subsonic.te
@@ -1,4 +1,4 @@
-policy_module(subsonic, 0.1.64)
+policy_module(subsonic, 0.1.69)
 
 require {
     type init_t;
@@ -48,14 +48,18 @@ read_files_pattern(subsonic_t, subsonic_ro_t, subsonic_ro_t)
 read_lnk_files_pattern(subsonic_t, subsonic_ro_t, subsonic_ro_t)
 read_files_pattern(subsonic_t, public_content_t, public_content_t)
 read_lnk_files_pattern(subsonic_t, public_content_t, public_content_t)
+mmap_files_pattern(subsonic_t, subsonic_ro_t, subsonic_ro_t)
 
 manage_files_pattern(subsonic_t, subsonic_rw_t, subsonic_rw_t)
+manage_dirs_pattern(subsonic_t, subsonic_rw_t, subsonic_rw_t)
 manage_lnk_files_pattern(subsonic_t, subsonic_rw_t, subsonic_rw_t)
 manage_files_pattern(subsonic_t, public_content_rw_t, public_content_rw_t)
+mmap_files_pattern(subsonic_t, subsonic_rw_t, subsonic_rw_t)
 
 sysnet_dns_name_resolve(subsonic_t)
 
 sssd_read_public_files(subsonic_t)
 
 dev_read_rand(subsonic_t)
+dev_read_sysfs(subsonic_t)