[selinux-policy: 2462/3172] Improve documentation of seutil_sigchld_newrole().

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 22:38:35 UTC 2010


commit b675cec7f8bb358a66a175e0e73bb71d170093a9
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Mar 3 14:16:22 2010 -0500

    Improve documentation of seutil_sigchld_newrole().

 policy/modules/system/selinuxutil.if |   10 ++++++++++
 1 files changed, 10 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if
index d01cffc..d37974c 100644
--- a/policy/modules/system/selinuxutil.if
+++ b/policy/modules/system/selinuxutil.if
@@ -244,11 +244,21 @@ interface(`seutil_dontaudit_signal_newrole',`
 ## <summary>
 ##	Send a SIGCHLD signal to newrole.
 ## </summary>
+## <desc>
+##	<p>
+##	Allow the specified domain to send a SIGCHLD
+##	signal to newrole.  This signal is automatically
+##	sent from a process that is terminating to
+##	its parent.  This may be needed by domains
+##	that are executed from newrole.
+##	</p>
+## </desc>
 ## <param name="domain">
 ##	<summary>
 ##	Domain allowed access.
 ##	</summary>
 ## </param>
+## <infoflow type="write" weight="1"/>
 #
 interface(`seutil_sigchld_newrole',`
 	gen_require(`


More information about the scm-commits mailing list