From 435388f6b50495a6615b811b129ca6d3020f7355 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Thu, 10 Feb 2022 11:38:56 +0100
Subject: [PATCH] Allow alsa bind mixer controls to led triggers

Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/435388f6b50495a6615b811b129ca6d3020f7355
Conflict: NA

Since v5.13, the kernel has support to bind certain alsa mixer controls
to LED triggers from userspace to control the mute-LEDS found on some
devices (typically embedded inside the keyboard's mute keys).

To allow that, alsa needs to be able to execute "modprobe snd_ctl_led"
and write to /sys/class/sound/ctl-led/speaker/ and .../mic.

Resolves: rhbz#1958210
Signed-off-by: lujie54 <lujie54@huawei.com>
---
 policy/modules/contrib/alsa.te | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/policy/modules/contrib/alsa.te b/policy/modules/contrib/alsa.te
index aee9fe8..3f1a7b0 100644
--- a/policy/modules/contrib/alsa.te
+++ b/policy/modules/contrib/alsa.te
@@ -82,12 +82,14 @@ corecmd_exec_bin(alsa_t)
 
 dev_getattr_fs(alsa_t)
 dev_read_sound(alsa_t)
-dev_read_sysfs(alsa_t)
+dev_rw_sysfs(alsa_t)
 dev_read_urand(alsa_t)
 dev_write_sound(alsa_t)
 
 files_search_var_lib(alsa_t)
 
+modutils_domtrans_kmod(alsa_t)
+
 term_dontaudit_use_console(alsa_t)
 term_dontaudit_use_generic_ptys(alsa_t)
 term_dontaudit_use_all_ptys(alsa_t)
-- 
1.8.3.1