[selinux-policy: 985/3172] tweaks from dan
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 20:30:07 UTC 2010
commit 9cc2ccc4ed5f828056f3609598435d54332b1817
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Tue Nov 22 17:56:53 2005 +0000
tweaks from dan
refpolicy/Changelog | 3 +--
refpolicy/Makefile | 3 ---
refpolicy/policy/modules/system/userdomain.if | 12 ++++++++----
3 files changed, 9 insertions(+), 9 deletions(-)
---
diff --git a/refpolicy/Changelog b/refpolicy/Changelog
index 38b36c6..17fc6e6 100644
--- a/refpolicy/Changelog
+++ b/refpolicy/Changelog
@@ -1,7 +1,6 @@
-- Fixes from Dan Walsh for ldap and authlogin.
+- Miscellaneous fixes from Dan Walsh.
- Fix corenetwork gen_context()'s to expand during the policy
build phase instead of during the generation phase.
-- DISTRO=redhat now implies DIRECT_INITRC=y.
- Added policies:
amanda
avahi
diff --git a/refpolicy/Makefile b/refpolicy/Makefile
index d814771..ec55b76 100644
--- a/refpolicy/Makefile
+++ b/refpolicy/Makefile
@@ -142,9 +142,6 @@ endif
# enable distribution-specific policy
ifneq ($(DISTRO),)
override M4PARAM += -D distro_$(DISTRO)
-ifeq ($(DISTRO),redhat)
- override DIRECT_INITRC := y
-endif
endif
ifneq ($(OUTPUT_POLICY),)
diff --git a/refpolicy/policy/modules/system/userdomain.if b/refpolicy/policy/modules/system/userdomain.if
index 615afb0..d0cd834 100644
--- a/refpolicy/policy/modules/system/userdomain.if
+++ b/refpolicy/policy/modules/system/userdomain.if
@@ -2465,11 +2465,15 @@ interface(`userdom_write_unpriv_user_tmp',`
## </param>
#
interface(`userdom_dontaudit_use_unpriv_user_tty',`
- gen_require(`
- attribute user_ttynode;
- ')
+ ifdef(`targeted_policy',`
+ term_dontaudit_use_generic_pty($1)
+ ',`
+ gen_require(`
+ attribute user_ttynode;
+ ')
- dontaudit $1 user_ttynode:chr_file rw_file_perms;
+ dontaudit $1 user_ttynode:chr_file rw_file_perms;
+ ')
')
########################################
More information about the scm-commits
mailing list