[selinux-policy: 319/3172] add can_exec

[Daniel J Walsh]

commit e3fd778b8fa8d2fa5941a6c83a38ee81d7e6001f
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu Jun 9 23:06:07 2005 +0000

    add can_exec

 refpolicy/policy/support/misc_macros.spt |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/support/misc_macros.spt b/refpolicy/policy/support/misc_macros.spt
index 37f25d9..148e545 100644
--- a/refpolicy/policy/support/misc_macros.spt
+++ b/refpolicy/policy/support/misc_macros.spt
@@ -18,3 +18,5 @@ define(`shiftn',`ifelse($1,0,`shift($*)',`shiftn(decr($1),shift(shift($*)))')')
 # Optionally put the sensitivity for the file
 #
 define(`context_template',`ifdef(`enable_mls',`$1:$2',`$1')') dnl
+
+define(`can_exec',`allow $1 $2:file { getattr read execute execute_no_trans };')