[selinux-policy: 63/3172] convert over optional policy to optional_policy macro
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:10:25 UTC 2010
commit 3009816bcdcc5ae99d3f79792d6b40dec5979ebb
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Thu Apr 28 15:48:27 2005 +0000
convert over optional policy to optional_policy macro
refpolicy/policy/modules/kernel/bootloader.te | 2 +-
refpolicy/policy/modules/system/init.te | 14 +-------------
refpolicy/policy/modules/system/logging.te | 2 +-
3 files changed, 3 insertions(+), 15 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/bootloader.te b/refpolicy/policy/modules/kernel/bootloader.te
index 098053b..162ad3f 100644
--- a/refpolicy/policy/modules/kernel/bootloader.te
+++ b/refpolicy/policy/modules/kernel/bootloader.te
@@ -140,7 +140,7 @@ allow bootloader_t bootloader_tmp_t:lnk_file { create read getattr setattr unlin
# for tune2fs (cjp: ?)
files_create_private_root_dir_entry(bootloader_t,bootloader_tmp_t)
-ifdef(`fsadm.te', `
+optional_policy(`fsadm.te', `
filesystemtools_execute(bootloader_t)
')
diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te
index f000376..a414ffe 100644
--- a/refpolicy/policy/modules/system/init.te
+++ b/refpolicy/policy/modules/system/init.te
@@ -140,24 +140,12 @@ allow init_t self:capability ~sys_module;
# Modify utmp.
allow init_t initrc_var_run_t:file { getattr read write setattr };
-define(`init_consoletype_optional_policy',`
+optional_policy(`consoletype.te',`
consoletype_execute(init_t,optional)
')
########################################
#
-# Conditional policy logic
-#
-
-ifdef(`monolithic_policy',`
-ifdef(`consoletype.te',`init_consoletype_optional_policy')
-',`
-optional consoletype { consoletype_execute_depend }
-ifopt (consoletype) { init_consoletype_optional_policy }
-') dnl end monolithic_policy
-
-########################################
-#
# the following still need to be converted over
#
diff --git a/refpolicy/policy/modules/system/logging.te b/refpolicy/policy/modules/system/logging.te
index d7879f8..05ba325 100644
--- a/refpolicy/policy/modules/system/logging.te
+++ b/refpolicy/policy/modules/system/logging.te
@@ -153,7 +153,7 @@ kernel_clear_ring_buffer(syslogd_t)
kernel_change_ring_buffer_level(syslogd_t)
')
-ifdef(`udev.te', `
+optional_policy(`udev.te', `
udev_read_database(syslogd_t)
')dnl end if udev.te
More information about the scm-commits
mailing list