[selinux-policy: 2433/3172] Improve documentation on miscfiles_read_localization().

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:35:59 UTC 2010


commit 611bc9311d84392da9c09e1df9fdbea9861d24f0
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Feb 24 14:56:07 2010 -0500

    Improve documentation on miscfiles_read_localization().

 policy/modules/system/miscfiles.if |   14 +++++++++++++-
 1 files changed, 13 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/system/miscfiles.if b/policy/modules/system/miscfiles.if
index 783f38e..5b840aa 100644
--- a/policy/modules/system/miscfiles.if
+++ b/policy/modules/system/miscfiles.if
@@ -211,13 +211,25 @@ interface(`miscfiles_setattr_localization',`
 
 ########################################
 ## <summary>
-##	Allow process to read localization info
+##	Allow process to read localization information.
 ## </summary>
+## <desc>
+##	<p>
+##	Allow the specified domain to read the localization files.
+##	This is typically for time zone configuration files, such as
+##	/etc/localtime and files in /usr/share/zoneinfo.
+##	Typically, any domain which needs to know the GMT/UTC
+##	offset of the current timezone will need access
+##	to these files. Generally, it should be safe for any
+##	domain to read these files.
+##	</p>
+## </desc>
 ## <param name="domain">
 ##	<summary>
 ##	Domain allowed access.
 ##	</summary>
 ## </param>
+## <infoflow type="read" weight="10"/>
 #
 interface(`miscfiles_read_localization',`
 	gen_require(`


More information about the scm-commits mailing list