[selinux-policy: 3019/3172] Use can_exec.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:28:37 UTC 2010


commit 618ce85f8644651501724947b134855e9e827a74
Author: Dominick Grift <domg472 at gmail.com>
Date:   Fri Sep 17 12:36:31 2010 +0200

    Use can_exec.

 policy/modules/services/ftp.if |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/ftp.if b/policy/modules/services/ftp.if
index bc27421..943219f 100644
--- a/policy/modules/services/ftp.if
+++ b/policy/modules/services/ftp.if
@@ -67,7 +67,7 @@ interface(`ftp_check_exec',`
 	')
 
 	corecmd_search_bin($1)
-	allow $1 ftpd_exec_t:file { getattr execute };
+	can_exec($1, ftpd_exec_t)
 ')
 
 ########################################


More information about the scm-commits mailing list