[selinux-policy: 1300/3172] remove unneeded gen_require in can_exec
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 20:57:41 UTC 2010
commit a5d54655dd1acde73925c1f1663abfb8b1cd5366
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Tue Mar 28 18:14:24 2006 +0000
remove unneeded gen_require in can_exec
refpolicy/policy/support/misc_macros.spt | 8 +-------
1 files changed, 1 insertions(+), 7 deletions(-)
---
diff --git a/refpolicy/policy/support/misc_macros.spt b/refpolicy/policy/support/misc_macros.spt
index 1e57e33..c1b08ed 100644
--- a/refpolicy/policy/support/misc_macros.spt
+++ b/refpolicy/policy/support/misc_macros.spt
@@ -43,13 +43,7 @@ define(`gen_context',`$1`'ifdef(`enable_mls',`:$2')`'ifdef(`enable_mcs',`:s0`'if
#
# can_exec(domain,executable)
#
-define(`can_exec',`
- gen_require(`
- class file { rx_file_perms execute_no_trans };
- ')
-
- allow $1 $2:file { rx_file_perms execute_no_trans };
-')
+define(`can_exec',`allow $1 $2:file { rx_file_perms execute_no_trans };')
########################################
#
More information about the scm-commits
mailing list