From 9a2a23e0eb83f4273b2b5c8a32f55af8a6230934 Mon Sep 17 00:00:00 2001
From: Marcin Haba <marcin.haba@bacula.pl>
Date: Sat, 28 Nov 2015 17:03:00 +0100
Subject: [PATCH] baculum: Update SELinux policy module

---
 gui/baculum/examples/selinux/baculum.pp | Bin 2986 -> 3178 bytes
 gui/baculum/examples/selinux/baculum.te |   6 ++++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/gui/baculum/examples/selinux/baculum.pp b/gui/baculum/examples/selinux/baculum.pp
index 98d24d6dd2a970b38cd662ac99965a3d96144291..9c145b1ecb0eb67ce35394ee8d4205cc9e2ca85a 100644
GIT binary patch
delta 202
zcmZ1_{z_uQJ4RL}1_lPE$)6cjgn2+LATF*fjxS0r&Mz%Wo-D=`%F6*117U6;W}mFX
zEIoNLlMO3KH5-V>no*FGSuptoQ$HgISoS>=+vG~-3`X9`e5}r!Raqu5PJYNHvpJWw
zgmLmpc7@4|>@JKAli#sOPfld_0J7@X<R_nG-@wQ`c_Xv%<aj2Y$$L2jCa>gBVf;V&
k9LMU(lAJt~S8`fx-pk3&2(;oPm;Gc1ZWgGuU%9pd01*y2Q~&?~

delta 178
zcmaDQu}XZyJ4RMU1_lPk$)6cjCTlZ=@UjDWAj}QKY?FJK!YA`HcTDbPl9{Z}%r<!^
za|R>NWItBt&8aLC7$@&#li6I#CcrrPE33@ph3p=aTiInMvvPoFg~_=b8zu+wh)n*;
zAuxF_3(sU<P8G)b$#PuglUH(<Og_mXGC7`!2L~3JJb}x0VjTPAi(IoA*(c|6+fP2h
Gy$ArrtTPe-

diff --git a/gui/baculum/examples/selinux/baculum.te b/gui/baculum/examples/selinux/baculum.te
index f7394481e8..907d6606cf 100644
--- a/gui/baculum/examples/selinux/baculum.te
+++ b/gui/baculum/examples/selinux/baculum.te
@@ -6,13 +6,14 @@ require {
 	type httpd_t;
 	type bacula_etc_t;
 	type unreserved_port_t;
+	type hplip_port_t;
 	type sudo_exec_t;
 	type httpd_cache_t;
 	class tcp_socket { name_bind name_connect };
 	class dir { search read write create getattr };
 	class file { read write create getattr open execute };
 	class netlink_audit_socket { write nlmsg_relay create read };
-	class capability { audit_write };
+	class capability { audit_write sys_resource };
 }
 
 #============= httpd_t ==============
@@ -21,6 +22,7 @@ allow httpd_t mysqld_port_t:tcp_socket name_connect;
 allow httpd_t postgresql_port_t:tcp_socket name_connect;
 allow httpd_t unreserved_port_t:tcp_socket name_bind;
 allow httpd_t unreserved_port_t:tcp_socket name_connect;
+allow httpd_t hplip_port_t:tcp_socket name_connect;
 allow httpd_t bacula_etc_t:dir search;
 allow httpd_t bacula_etc_t:file getattr;
 allow httpd_t bacula_etc_t:file { read open };
@@ -28,4 +30,4 @@ allow httpd_t sudo_exec_t:file { read execute open };
 allow httpd_t httpd_cache_t:dir { read create };
 allow httpd_t httpd_cache_t:file { read write create };
 allow httpd_t self:netlink_audit_socket { write nlmsg_relay create read };
-allow httpd_t self:capability { audit_write };
+allow httpd_t self:capability { audit_write sys_resource };
-- 
2.39.5