[selinux-policy: 1289/3172] add in full permission sets now that it will be used for require blocks.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 20:56:36 UTC 2010


commit 701316787c854711dc02eb88a0d7ab5e47cb6e7c
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Mar 21 20:23:29 2006 +0000

    add in full permission sets now that it will be used for require blocks.

 refpolicy/Rules.monolithic |    6 ++++--
 1 files changed, 4 insertions(+), 2 deletions(-)
---
diff --git a/refpolicy/Rules.monolithic b/refpolicy/Rules.monolithic
index b6aab0b..9503485 100644
--- a/refpolicy/Rules.monolithic
+++ b/refpolicy/Rules.monolithic
@@ -101,9 +101,11 @@ $(TMPDIR)/pre_te_files.conf: $(PRE_TE_FILES)
 	$(verbose) $(M4) $(M4PARAM) $^ > $@
 
 $(TMPDIR)/generated_definitions.conf: $(ALL_TE_FILES)
-# per-userdomain templates:
 	@test -d $(TMPDIR) || mkdir -p $(TMPDIR)
-	$(verbose) echo "define(\`base_per_userdomain_template',\`" > $@
+# define all available object classes
+	$(verbose) $(GENPERM) $(AVS) $(SECCLASS) > $@
+# per-userdomain templates:
+	$(verbose) echo "define(\`base_per_userdomain_template',\`" >> $@
 	$(verbose) $(foreach mod,$(basename $(notdir $(ALL_MODULES))), \
 		echo "ifdef(\`""$(mod)""_per_userdomain_template',\`""$(mod)""_per_userdomain_template("'$$*'")')" >> $@ ;)
 	$(verbose) echo "')" >> $@


More information about the scm-commits mailing list