[selinux-policy: 809/3172] fix

[Daniel J Walsh]

commit e64b338b3513c07f9ed53a95bdbc6089c8aa048a
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Oct 24 15:29:27 2005 +0000

    fix

 refpolicy/policy/modules/admin/kudzu.te |    7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/admin/kudzu.te b/refpolicy/policy/modules/admin/kudzu.te
index 4e99ea1..31691cd 100644
--- a/refpolicy/policy/modules/admin/kudzu.te
+++ b/refpolicy/policy/modules/admin/kudzu.te
@@ -121,6 +121,13 @@ ifdef(`targeted_policy',`
         term_dontaudit_use_unallocated_tty(kudzu_t)
         term_dontaudit_use_generic_pty(kudzu_t)
         files_dontaudit_read_root_file(kudzu_t)
+
+	# cjp: this was originally in the else block
+	# of ifdef userhelper.te, but it seems to
+	# make more sense here.  also, require
+	# blocks curently do not work in the
+	# else block of optionals
+	unconfined_domain_template(kudzu_t)
 ')
 
 tunable_policy(`allow_execmem',`