[selinux-policy: 2806/3172] Remove unnecessary require on cgroup_admin().

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:09:44 UTC 2010


commit 00ca404a20667fd5a8c02996d7e51e8164fba1fc
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Mon Aug 9 09:10:24 2010 -0400

    Remove unnecessary require on cgroup_admin().

 policy/modules/services/cgroup.if |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/cgroup.if b/policy/modules/services/cgroup.if
index 66d68bc..d020c93 100644
--- a/policy/modules/services/cgroup.if
+++ b/policy/modules/services/cgroup.if
@@ -168,7 +168,7 @@ interface(`cgroup_admin',`
 	gen_require(`
 		type cgred_t, cgconfig_t, cgred_var_run_t;
 		type cgconfig_etc_t, cgconfig_initrc_exec_t, cgred_initrc_exec_t;
-		type cgrules_etc_t, cgclear_t, cgclear_exec_t;
+		type cgrules_etc_t, cgclear_t;
 	')
 
 	allow $1 cgclear_t:process { ptrace signal_perms };


More information about the scm-commits mailing list