[selinux-policy: 2811/3172] Additional kdumpgui cleanup.

[Daniel J Walsh]

commit a9539a063b132fdf74c2ffe2e7f0416c6120f3f4
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Aug 10 09:21:01 2010 -0400

    Additional kdumpgui cleanup.

 Changelog                       |    1 +
 policy/modules/apps/kdumpgui.fc |    2 +-
 policy/modules/apps/kdumpgui.te |   10 +++-------
 3 files changed, 5 insertions(+), 8 deletions(-)
---
diff --git a/Changelog b/Changelog
index 1cf7dc4..e0fcc58 100644
--- a/Changelog
+++ b/Changelog
@@ -7,6 +7,7 @@
 - Added modules:
 	accountsd (Dan Walsh)
 	cgroup (Dominick Grift)
+	kdumpgui (Dan Walsh)
 	livecd (Dan Walsh)
 	mojomojo (Lain Arnell)
 	sambagui (Dan Walsh)
diff --git a/policy/modules/apps/kdumpgui.fc b/policy/modules/apps/kdumpgui.fc
index f97c6e9..250679c 100644
--- a/policy/modules/apps/kdumpgui.fc
+++ b/policy/modules/apps/kdumpgui.fc
@@ -1 +1 @@
-/usr/share/system-config-kdump/system-config-kdump-backend.py		--	gen_context(system_u:object_r:kdumpgui_exec_t,s0)
+/usr/share/system-config-kdump/system-config-kdump-backend\.py	--	gen_context(system_u:object_r:kdumpgui_exec_t,s0)
diff --git a/policy/modules/apps/kdumpgui.te b/policy/modules/apps/kdumpgui.te
index 777acf4..f63c4c2 100644
--- a/policy/modules/apps/kdumpgui.te
+++ b/policy/modules/apps/kdumpgui.te
@@ -7,7 +7,6 @@ policy_module(kdumpgui, 1.0.0)
 
 type kdumpgui_t;
 type kdumpgui_exec_t;
-
 dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
 
 ######################################
@@ -15,9 +14,7 @@ dbus_system_domain(kdumpgui_t, kdumpgui_exec_t)
 # system-config-kdump local policy
 #
 
-allow kdumpgui_t self:capability { net_admin sys_admin sys_rawio };
 allow kdumpgui_t self:fifo_file rw_fifo_file_perms;
-
 allow kdumpgui_t self:netlink_kobject_uevent_socket create_socket_perms;
 
 kernel_read_system_state(kdumpgui_t)
@@ -29,14 +26,13 @@ corecmd_exec_shell(kdumpgui_t)
 dev_dontaudit_getattr_all_chr_files(kdumpgui_t)
 dev_read_sysfs(kdumpgui_t)
 
-# for blkid.tab
-files_manage_etc_runtime_files(kdumpgui_t)
-files_etc_filetrans_etc_runtime(kdumpgui_t, file)
-
 files_manage_boot_files(kdumpgui_t)
 files_manage_boot_symlinks(kdumpgui_t)
 # Needed for running chkconfig
 files_manage_etc_symlinks(kdumpgui_t)
+# for blkid.tab
+files_manage_etc_runtime_files(kdumpgui_t)
+files_etc_filetrans_etc_runtime(kdumpgui_t, file)
 
 storage_raw_read_fixed_disk(kdumpgui_t)
 storage_raw_write_fixed_disk(kdumpgui_t)