From 435388f6b50495a6615b811b129ca6d3020f7355 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Thu, 10 Feb 2022 11:38:56 +0100 Subject: [PATCH] Allow alsa bind mixer controls to led triggers Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/435388f6b50495a6615b811b129ca6d3020f7355 Conflict: NA Since v5.13, the kernel has support to bind certain alsa mixer controls to LED triggers from userspace to control the mute-LEDS found on some devices (typically embedded inside the keyboard's mute keys). To allow that, alsa needs to be able to execute "modprobe snd_ctl_led" and write to /sys/class/sound/ctl-led/speaker/ and .../mic. Resolves: rhbz#1958210 Signed-off-by: lujie54 --- policy/modules/contrib/alsa.te | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te index aee9fe8..3f1a7b0 100644 --- a/policy/modules/contrib/alsa.te +++ b/policy/modules/contrib/alsa.te @@ -82,12 +82,14 @@ corecmd_exec_bin(alsa_t) dev_getattr_fs(alsa_t) dev_read_sound(alsa_t) -dev_read_sysfs(alsa_t) +dev_rw_sysfs(alsa_t) dev_read_urand(alsa_t) dev_write_sound(alsa_t) files_search_var_lib(alsa_t) +modutils_domtrans_kmod(alsa_t) + term_dontaudit_use_console(alsa_t) term_dontaudit_use_generic_ptys(alsa_t) term_dontaudit_use_all_ptys(alsa_t) -- 1.8.3.1