rename admin_tun_type to admindomain.
This commit is contained in:
parent
bd75703c7d
commit
0be901ba40
@ -1039,7 +1039,7 @@ template(`userdom_unpriv_user_template', `
|
||||
#
|
||||
template(`userdom_admin_user_template',`
|
||||
gen_require(`
|
||||
attribute admin_tun_type;
|
||||
attribute admindomain;
|
||||
class passwd { passwd chfn chsh rootok };
|
||||
')
|
||||
|
||||
@ -1055,7 +1055,7 @@ template(`userdom_admin_user_template',`
|
||||
domain_obj_id_change_exemption($1_t)
|
||||
role system_r types $1_t;
|
||||
|
||||
typeattribute $1_t admin_tun_type;
|
||||
typeattribute $1_t admindomain;
|
||||
|
||||
ifdef(`direct_sysadm_daemon',`
|
||||
domain_system_change_exemption($1_t)
|
||||
@ -1295,10 +1295,10 @@ interface(`userdom_user_home_content',`
|
||||
#
|
||||
interface(`userdom_attach_admin_tun_iface',`
|
||||
gen_require(`
|
||||
attribute admin_tun_type;
|
||||
attribute admindomain;
|
||||
')
|
||||
|
||||
allow $1 admin_tun_type:tun_socket relabelfrom;
|
||||
allow $1 admindomain:tun_socket relabelfrom;
|
||||
allow $1 self:tun_socket relabelto;
|
||||
')
|
||||
|
||||
|
@ -49,7 +49,7 @@ gen_tunable(user_rw_noexattrfile, false)
|
||||
## </desc>
|
||||
gen_tunable(user_ttyfile_stat, false)
|
||||
|
||||
attribute admin_tun_type;
|
||||
attribute admindomain;
|
||||
|
||||
# all user domains
|
||||
attribute userdomain;
|
||||
|
Loading…
Reference in New Issue
Block a user