[selinux-policy: 209/3172] cleanup for corenetwork interface generation

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:23:01 UTC 2010


commit c907b3e2c769dc1f8019a9a09a8cbf85a9cbe5b0
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue May 24 17:34:29 2005 +0000

    cleanup for corenetwork interface generation

 refpolicy/policy/modules/kernel/corenetwork.if |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/corenetwork.if b/refpolicy/policy/modules/kernel/corenetwork.if
index 68ea75d..8d9c27f 100644
--- a/refpolicy/policy/modules/kernel/corenetwork.if
+++ b/refpolicy/policy/modules/kernel/corenetwork.if
@@ -2,6 +2,7 @@
 ## <module name="corenetwork" layer="kernel">
 ## <summary>Policy controlling access to network objects</summary>
 
+ifdef(`interface_pass',`',`
 #######################################
 #
 # corenetwork_network_tcp_on_general_interface(domain)
@@ -784,6 +785,7 @@ attribute reserved_port_type;
 class udp_socket name_bind;
 ')
 
+') dnl end if not interface_pass
 ########################################
 #
 # This section is processed through m4 to create real interfaces
@@ -1315,4 +1317,6 @@ declare_ports($1_port_t,shift($*))
 ')
 ')
 
+ifdef(`interface_pass',`',`
 ## </module>
+')


More information about the scm-commits mailing list