[selinux-policy: 1300/3172] remove unneeded gen_require in can_exec

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:57:41 UTC 2010


commit a5d54655dd1acde73925c1f1663abfb8b1cd5366
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Mar 28 18:14:24 2006 +0000

    remove unneeded gen_require in can_exec

 refpolicy/policy/support/misc_macros.spt |    8 +-------
 1 files changed, 1 insertions(+), 7 deletions(-)
---
diff --git a/refpolicy/policy/support/misc_macros.spt b/refpolicy/policy/support/misc_macros.spt
index 1e57e33..c1b08ed 100644
--- a/refpolicy/policy/support/misc_macros.spt
+++ b/refpolicy/policy/support/misc_macros.spt
@@ -43,13 +43,7 @@ define(`gen_context',`$1`'ifdef(`enable_mls',`:$2')`'ifdef(`enable_mcs',`:s0`'if
 #
 # can_exec(domain,executable)
 #
-define(`can_exec',`
-	gen_require(`
-		class file { rx_file_perms execute_no_trans };
-	')
-
-	allow $1 $2:file { rx_file_perms execute_no_trans };
-')
+define(`can_exec',`allow $1 $2:file { rx_file_perms execute_no_trans };')
 
 ########################################
 #


More information about the scm-commits mailing list