[selinux-policy: 3052/3172] This is a role capability.

[Daniel J Walsh]

commit 55c2e0e0a4431aeac79dcd7fbcb941aef586ebd5
Author: Dominick Grift <domg472 at gmail.com>
Date:   Mon Sep 20 12:49:16 2010 +0200

    This is a role capability.
    
    This is a role capability.
    
    This is a role capability.
    
    This is a role capability.
    
    This is a role capability.
    
    This is a role capability.
    
    This is a role capability.
    
    This is a role capability.

 policy/modules/services/lpd.if         |    1 +
 policy/modules/services/mock.if        |    2 ++
 policy/modules/services/mta.if         |    2 ++
 policy/modules/services/nscd.if        |    1 +
 policy/modules/services/policykit.if   |    1 +
 policy/modules/services/portreserve.if |    1 +
 policy/modules/services/postfix.if     |    2 ++
 7 files changed, 10 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/services/lpd.if b/policy/modules/services/lpd.if
index 20c8eed..7965364 100644
--- a/policy/modules/services/lpd.if
+++ b/policy/modules/services/lpd.if
@@ -14,6 +14,7 @@
 ##	User domain for the role
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`lpd_role',`
 	gen_require(`
diff --git a/policy/modules/services/mock.if b/policy/modules/services/mock.if
index 5fe54b1..ab0a29e 100644
--- a/policy/modules/services/mock.if
+++ b/policy/modules/services/mock.if
@@ -148,6 +148,7 @@ interface(`mock_manage_lib_chr_files',`
 ##	The role to be allowed the mock domain.
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`mock_run',`
 	gen_require(`
@@ -172,6 +173,7 @@ interface(`mock_run',`
 ##	User domain for the role
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`mock_role',`
 	gen_require(`
diff --git a/policy/modules/services/mta.if b/policy/modules/services/mta.if
index a162627..2f948ad 100644
--- a/policy/modules/services/mta.if
+++ b/policy/modules/services/mta.if
@@ -37,6 +37,7 @@ interface(`mta_stub',`
 ##	is the prefix for user_t).
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 template(`mta_base_mail_template',`
 	gen_require(`
@@ -157,6 +158,7 @@ template(`mta_base_mail_template',`
 ##	User domain for the role
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`mta_role',`
 	gen_require(`
diff --git a/policy/modules/services/nscd.if b/policy/modules/services/nscd.if
index cb66404..99cefb8 100644
--- a/policy/modules/services/nscd.if
+++ b/policy/modules/services/nscd.if
@@ -245,6 +245,7 @@ interface(`nscd_unconfined',`
 ##	Role allowed access.
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`nscd_run',`
 	gen_require(`
diff --git a/policy/modules/services/policykit.if b/policy/modules/services/policykit.if
index c5d6c1b..13cdc77 100644
--- a/policy/modules/services/policykit.if
+++ b/policy/modules/services/policykit.if
@@ -79,6 +79,7 @@ interface(`policykit_domtrans_auth',`
 ##	Role allowed access.
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`policykit_run_auth',`
 	gen_require(`
diff --git a/policy/modules/services/portreserve.if b/policy/modules/services/portreserve.if
index 1830df9..bf9bd05 100644
--- a/policy/modules/services/portreserve.if
+++ b/policy/modules/services/portreserve.if
@@ -96,6 +96,7 @@ interface(`portreserve_manage_config',`
 ##	Role allowed access.
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`portreserve_admin',`
 	gen_require(`
diff --git a/policy/modules/services/postfix.if b/policy/modules/services/postfix.if
index 4f6f912..3aaeb31 100644
--- a/policy/modules/services/postfix.if
+++ b/policy/modules/services/postfix.if
@@ -677,6 +677,7 @@ interface(`postfix_domtrans_user_mail_handler',`
 ##	Role allowed access.
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`postfix_admin',`
 	gen_require(`
@@ -745,6 +746,7 @@ interface(`postfix_admin',`
 ##	Domain allowed to transition.
 ##	</summary>
 ## </param>
+## <rolecap/>
 #
 interface(`postfix_run_postdrop',`
 	gen_require(`