[selinux-policy: 222/3172] tmpfs associate for redhat

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:24:07 UTC 2010


commit 07da0af7bd1f5abf1df91a998b7900f884092d5f
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri May 27 20:43:37 2005 +0000

    tmpfs associate for redhat

 refpolicy/policy/modules/kernel/devices.if |   11 +++++++----
 1 files changed, 7 insertions(+), 4 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/devices.if b/refpolicy/policy/modules/kernel/devices.if
index afe9f5f..3d2c5e4 100644
--- a/refpolicy/policy/modules/kernel/devices.if
+++ b/refpolicy/policy/modules/kernel/devices.if
@@ -7,14 +7,14 @@
 define(`devices_make_device_node',`
 requires_block_template(`$0'_depend)
 typeattribute $1 device_node;
-filesystem_associate($1,optional)
-filesystem_tmpfs_associate($1,optional)
+filesystem_associate($1)
+optional_policy(`distro_redhat',`
+filesystem_tmpfs_associate($1)
+')
 ')
 
 define(`devices_make_device_node_depend',`
 attribute device_node;
-filesystem_associate_depend
-filesystem_tmpfs_associate_depend
 ')
 
 ########################################
@@ -226,6 +226,9 @@ define(`devices_create_dev_entry',`
 requires_block_template(`$0'_depend)
 allow $1 device_t:dir { getattr search read write add_name remove_name };
 type_transition $1 device_t:$3 $2;
+optional_policy(`distro_redhat',`
+filesystem_tmpfs_associate($2)
+')
 ')
 
 define(`devices_set_dev_entry_depend',`


More information about the scm-commits mailing list