[selinux-policy: 209/3172] cleanup for corenetwork interface generation
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:23:01 UTC 2010
commit c907b3e2c769dc1f8019a9a09a8cbf85a9cbe5b0
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Tue May 24 17:34:29 2005 +0000
cleanup for corenetwork interface generation
refpolicy/policy/modules/kernel/corenetwork.if | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/corenetwork.if b/refpolicy/policy/modules/kernel/corenetwork.if
index 68ea75d..8d9c27f 100644
--- a/refpolicy/policy/modules/kernel/corenetwork.if
+++ b/refpolicy/policy/modules/kernel/corenetwork.if
@@ -2,6 +2,7 @@
## <module name="corenetwork" layer="kernel">
## <summary>Policy controlling access to network objects</summary>
+ifdef(`interface_pass',`',`
#######################################
#
# corenetwork_network_tcp_on_general_interface(domain)
@@ -784,6 +785,7 @@ attribute reserved_port_type;
class udp_socket name_bind;
')
+') dnl end if not interface_pass
########################################
#
# This section is processed through m4 to create real interfaces
@@ -1315,4 +1317,6 @@ declare_ports($1_port_t,shift($*))
')
')
+ifdef(`interface_pass',`',`
## </module>
+')
More information about the scm-commits
mailing list