[selinux-policy: 3019/3172] Use can_exec.
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 23:28:37 UTC 2010
commit 618ce85f8644651501724947b134855e9e827a74
Author: Dominick Grift <domg472 at gmail.com>
Date: Fri Sep 17 12:36:31 2010 +0200
Use can_exec.
policy/modules/services/ftp.if | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/ftp.if b/policy/modules/services/ftp.if
index bc27421..943219f 100644
--- a/policy/modules/services/ftp.if
+++ b/policy/modules/services/ftp.if
@@ -67,7 +67,7 @@ interface(`ftp_check_exec',`
')
corecmd_search_bin($1)
- allow $1 ftpd_exec_t:file { getattr execute };
+ can_exec($1, ftpd_exec_t)
')
########################################
More information about the scm-commits
mailing list