[selinux-policy: 2806/3172] Remove unnecessary require on cgroup_admin().
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 23:09:44 UTC 2010
commit 00ca404a20667fd5a8c02996d7e51e8164fba1fc
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Mon Aug 9 09:10:24 2010 -0400
Remove unnecessary require on cgroup_admin().
policy/modules/services/cgroup.if | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/cgroup.if b/policy/modules/services/cgroup.if
index 66d68bc..d020c93 100644
--- a/policy/modules/services/cgroup.if
+++ b/policy/modules/services/cgroup.if
@@ -168,7 +168,7 @@ interface(`cgroup_admin',`
gen_require(`
type cgred_t, cgconfig_t, cgred_var_run_t;
type cgconfig_etc_t, cgconfig_initrc_exec_t, cgred_initrc_exec_t;
- type cgrules_etc_t, cgclear_t, cgclear_exec_t;
+ type cgrules_etc_t, cgclear_t;
')
allow $1 cgclear_t:process { ptrace signal_perms };
More information about the scm-commits
mailing list