[selinux-policy: 784/3172] simplify since alias take care of it
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 20:12:48 UTC 2010
commit ae1d9afb5bef8ada11d2b019b19903e41573ba00
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Sat Oct 22 20:06:51 2005 +0000
simplify since alias take care of it
refpolicy/policy/modules/system/userdomain.if | 62 ++++++------------------
1 files changed, 16 insertions(+), 46 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/userdomain.if b/refpolicy/policy/modules/system/userdomain.if
index 0f01873..b6284ff 100644
--- a/refpolicy/policy/modules/system/userdomain.if
+++ b/refpolicy/policy/modules/system/userdomain.if
@@ -1815,44 +1815,23 @@ interface(`userdom_dontaudit_list_sysadm_home_dir',`
## </param>
#
interface(`userdom_create_sysadm_home',`
- ifdef(`targeted_policy',`
- gen_require(`
- type user_home_dir_t, user_home_t;
- ')
+ gen_require(`
+ type sysadm_home_dir_t, sysadm_home_t;
+ ')
- allow $1 user_home_dir_t:dir rw_dir_perms;
- ifelse(`$2',`',`
- ifelse(`$3',`',`
- type_transition $1 user_home_dir_t:file user_home_t;
- ',`
- type_transition $1 user_home_dir_t:$3 user_home_t;
- ')
+ allow $1 sysadm_home_dir_t:dir rw_dir_perms;
+
+ ifelse(`$2',`',`
+ ifelse(`$3',`',`
+ type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
',`
- ifelse(`$3',`',`
- type_transition $1 user_home_dir_t:file $2;
- ',`
- type_transition $1 user_home_dir_t:$3 $2;
- ')
+ type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
')
',`
- gen_require(`
- type sysadm_home_dir_t, sysadm_home_t;
- ')
-
- allow $1 sysadm_home_dir_t:dir rw_dir_perms;
-
- ifelse(`$2',`',`
- ifelse(`$3',`',`
- type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
- ',`
- type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
- ')
+ ifelse(`$3',`',`
+ type_transition $1 sysadm_home_dir_t:file $2;
',`
- ifelse(`$3',`',`
- type_transition $1 sysadm_home_dir_t:file $2;
- ',`
- type_transition $1 sysadm_home_dir_t:$3 $2;
- ')
+ type_transition $1 sysadm_home_dir_t:$3 $2;
')
')
')
@@ -1866,20 +1845,11 @@ interface(`userdom_create_sysadm_home',`
## </param>
#
interface(`userdom_search_sysadm_home_subdirs',`
- ifdef(`targeted_policy',`
- gen_require(`
- type user_home_dir_t, user_home_t;
- ')
-
- allow $1 { user_home_dir_t user_home_t }:dir search_dir_perms;
-
- ',`
- gen_require(`
- type sysadm_home_dir_t, sysadm_home_t;
- ')
-
- allow $1 { sysadm_home_dir_t sysadm_home_t }:dir search_dir_perms;
+ gen_require(`
+ type sysadm_home_dir_t, sysadm_home_t;
')
+
+ allow $1 { sysadm_home_dir_t sysadm_home_t }:dir search_dir_perms;
')
########################################
More information about the scm-commits
mailing list