[selinux-policy: 63/3172] convert over optional policy to optional_policy macro

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:10:25 UTC 2010


commit 3009816bcdcc5ae99d3f79792d6b40dec5979ebb
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu Apr 28 15:48:27 2005 +0000

    convert over optional policy to optional_policy macro

 refpolicy/policy/modules/kernel/bootloader.te |    2 +-
 refpolicy/policy/modules/system/init.te       |   14 +-------------
 refpolicy/policy/modules/system/logging.te    |    2 +-
 3 files changed, 3 insertions(+), 15 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/bootloader.te b/refpolicy/policy/modules/kernel/bootloader.te
index 098053b..162ad3f 100644
--- a/refpolicy/policy/modules/kernel/bootloader.te
+++ b/refpolicy/policy/modules/kernel/bootloader.te
@@ -140,7 +140,7 @@ allow bootloader_t bootloader_tmp_t:lnk_file { create read getattr setattr unlin
 # for tune2fs (cjp: ?)
 files_create_private_root_dir_entry(bootloader_t,bootloader_tmp_t)
 
-ifdef(`fsadm.te', `
+optional_policy(`fsadm.te', `
 filesystemtools_execute(bootloader_t)
 ')
 
diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te
index f000376..a414ffe 100644
--- a/refpolicy/policy/modules/system/init.te
+++ b/refpolicy/policy/modules/system/init.te
@@ -140,24 +140,12 @@ allow init_t self:capability ~sys_module;
 # Modify utmp.
 allow init_t initrc_var_run_t:file { getattr read write setattr };
 
-define(`init_consoletype_optional_policy',`
+optional_policy(`consoletype.te',`
 consoletype_execute(init_t,optional)
 ')
 
 ########################################
 #
-# Conditional policy logic
-#
-
-ifdef(`monolithic_policy',`
-ifdef(`consoletype.te',`init_consoletype_optional_policy')
-',`
-optional consoletype { consoletype_execute_depend }
-ifopt (consoletype) { init_consoletype_optional_policy }
-') dnl end monolithic_policy
-
-########################################
-#
 # the following still need to be converted over
 #
 
diff --git a/refpolicy/policy/modules/system/logging.te b/refpolicy/policy/modules/system/logging.te
index d7879f8..05ba325 100644
--- a/refpolicy/policy/modules/system/logging.te
+++ b/refpolicy/policy/modules/system/logging.te
@@ -153,7 +153,7 @@ kernel_clear_ring_buffer(syslogd_t)
 kernel_change_ring_buffer_level(syslogd_t)
 ')
 
-ifdef(`udev.te', `
+optional_policy(`udev.te', `
 udev_read_database(syslogd_t)
 ')dnl end if udev.te
 


More information about the scm-commits mailing list