[selinux-policy: 828/3172] Fixed an allow that should have been a dontaudit
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 20:16:39 UTC 2010
commit d2c57395ab2372913809610eaef4807e8414865e
Author: Don Miner <dminer at tresys.com>
Date: Mon Oct 24 22:20:04 2005 +0000
Fixed an allow that should have been a dontaudit
refpolicy/policy/modules/services/bluetooth.if | 6 +++---
.../policy/modules/services/networkmanager.te | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/bluetooth.if b/refpolicy/policy/modules/services/bluetooth.if
index d0b4322..0965ddb 100644
--- a/refpolicy/policy/modules/services/bluetooth.if
+++ b/refpolicy/policy/modules/services/bluetooth.if
@@ -8,11 +8,11 @@
## Domain allowed access.
## </param>
#
-interface(`bluetooth_read_helper_files',`
+interface(`bluetooth_dontaudit_read_helper_files',`
gen_require(`
type bluetooth_helper_t;
')
- allow $1 bluetooth_helper_t:dir search;
- allow $1 bluetooth_helper_t:file { read getattr };
+ dontaudit $1 bluetooth_helper_t:dir search;
+ dontaudit $1 bluetooth_helper_t:file { read getattr };
')
diff --git a/refpolicy/policy/modules/services/networkmanager.te b/refpolicy/policy/modules/services/networkmanager.te
index afc0dbf..3b17fa7 100644
--- a/refpolicy/policy/modules/services/networkmanager.te
+++ b/refpolicy/policy/modules/services/networkmanager.te
@@ -112,7 +112,7 @@ ifdef(`targeted_policy', `
')
optional_policy(`bluetooth.te',`
- bluetooth_read_helper_files(NetworkManager_t)
+ bluetooth_dontaudit_read_helper_files(NetworkManager_t)
')
optional_policy(`consoletype.te',`
More information about the scm-commits
mailing list