[selinux-policy: 127/3172] reorder restorecon and setfiles relabel rules for consistency
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:16:03 UTC 2010
commit e843cc89fd0ed667cf9455b04f04dc67d2e94265
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Mon May 9 19:06:56 2005 +0000
reorder restorecon and setfiles relabel rules for consistency
refpolicy/policy/modules/system/selinux.te | 4 ++--
refpolicy/policy/modules/system/selinuxutil.te | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/selinux.te b/refpolicy/policy/modules/system/selinux.te
index 3bc1093..6a0a865 100644
--- a/refpolicy/policy/modules/system/selinux.te
+++ b/refpolicy/policy/modules/system/selinux.te
@@ -329,10 +329,10 @@ hotplug_use_file_descriptors(restorecon_t)
')
# relabeling rules
-files_read_all_directories(restorecon_t)
kernel_relabel_unlabeled_object(restorecon_t)
devices_manage_all_devices_labels(restorecon_t)
files_manage_all_files_labels(restorecon_t)
+files_read_all_directories(restorecon_t)
# this is to satisfy the assertion:
authlogin_relabel_to_shadow_passwords(restorecon_t)
@@ -399,9 +399,9 @@ logging_send_system_log_message(setfiles_t)
miscfiles_read_localization(setfiles_t)
# relabeling rules
-files_read_all_directories(setfiles_t)
kernel_relabel_unlabeled_object(setfiles_t)
devices_manage_all_devices_labels(setfiles_t)
+files_read_all_directories(setfiles_t)
files_manage_all_files_labels(setfiles_t)
# this is to satisfy the assertion:
authlogin_relabel_to_shadow_passwords(setfiles_t)
diff --git a/refpolicy/policy/modules/system/selinuxutil.te b/refpolicy/policy/modules/system/selinuxutil.te
index 3bc1093..6a0a865 100644
--- a/refpolicy/policy/modules/system/selinuxutil.te
+++ b/refpolicy/policy/modules/system/selinuxutil.te
@@ -329,10 +329,10 @@ hotplug_use_file_descriptors(restorecon_t)
')
# relabeling rules
-files_read_all_directories(restorecon_t)
kernel_relabel_unlabeled_object(restorecon_t)
devices_manage_all_devices_labels(restorecon_t)
files_manage_all_files_labels(restorecon_t)
+files_read_all_directories(restorecon_t)
# this is to satisfy the assertion:
authlogin_relabel_to_shadow_passwords(restorecon_t)
@@ -399,9 +399,9 @@ logging_send_system_log_message(setfiles_t)
miscfiles_read_localization(setfiles_t)
# relabeling rules
-files_read_all_directories(setfiles_t)
kernel_relabel_unlabeled_object(setfiles_t)
devices_manage_all_devices_labels(setfiles_t)
+files_read_all_directories(setfiles_t)
files_manage_all_files_labels(setfiles_t)
# this is to satisfy the assertion:
authlogin_relabel_to_shadow_passwords(setfiles_t)
More information about the scm-commits
mailing list