[selinux-policy: 322/3172] fix can_exec

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:32:45 UTC 2010


commit 24040829d06b475515bd8a85a1a9d2b1b0987df5
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Jun 10 01:00:48 2005 +0000

    fix can_exec

 refpolicy/policy/support/misc_macros.spt |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/refpolicy/policy/support/misc_macros.spt b/refpolicy/policy/support/misc_macros.spt
index 148e545..1f9d2b0 100644
--- a/refpolicy/policy/support/misc_macros.spt
+++ b/refpolicy/policy/support/misc_macros.spt
@@ -19,4 +19,4 @@ define(`shiftn',`ifelse($1,0,`shift($*)',`shiftn(decr($1),shift(shift($*)))')')
 #
 define(`context_template',`ifdef(`enable_mls',`$1:$2',`$1')') dnl
 
-define(`can_exec',`allow $1 $2:file { getattr read execute execute_no_trans };')
+define(`can_exec',`allow $1 $2:file { rx_file_perms execute_no_trans };')


More information about the scm-commits mailing list