rename admin_tun_type to admindomain.
This commit is contained in:
parent
bd75703c7d
commit
0be901ba40
@ -1039,7 +1039,7 @@ template(`userdom_unpriv_user_template', `
|
|||||||
#
|
#
|
||||||
template(`userdom_admin_user_template',`
|
template(`userdom_admin_user_template',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
attribute admin_tun_type;
|
attribute admindomain;
|
||||||
class passwd { passwd chfn chsh rootok };
|
class passwd { passwd chfn chsh rootok };
|
||||||
')
|
')
|
||||||
|
|
||||||
@ -1055,7 +1055,7 @@ template(`userdom_admin_user_template',`
|
|||||||
domain_obj_id_change_exemption($1_t)
|
domain_obj_id_change_exemption($1_t)
|
||||||
role system_r types $1_t;
|
role system_r types $1_t;
|
||||||
|
|
||||||
typeattribute $1_t admin_tun_type;
|
typeattribute $1_t admindomain;
|
||||||
|
|
||||||
ifdef(`direct_sysadm_daemon',`
|
ifdef(`direct_sysadm_daemon',`
|
||||||
domain_system_change_exemption($1_t)
|
domain_system_change_exemption($1_t)
|
||||||
@ -1295,10 +1295,10 @@ interface(`userdom_user_home_content',`
|
|||||||
#
|
#
|
||||||
interface(`userdom_attach_admin_tun_iface',`
|
interface(`userdom_attach_admin_tun_iface',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
attribute admin_tun_type;
|
attribute admindomain;
|
||||||
')
|
')
|
||||||
|
|
||||||
allow $1 admin_tun_type:tun_socket relabelfrom;
|
allow $1 admindomain:tun_socket relabelfrom;
|
||||||
allow $1 self:tun_socket relabelto;
|
allow $1 self:tun_socket relabelto;
|
||||||
')
|
')
|
||||||
|
|
||||||
|
@ -49,7 +49,7 @@ gen_tunable(user_rw_noexattrfile, false)
|
|||||||
## </desc>
|
## </desc>
|
||||||
gen_tunable(user_ttyfile_stat, false)
|
gen_tunable(user_ttyfile_stat, false)
|
||||||
|
|
||||||
attribute admin_tun_type;
|
attribute admindomain;
|
||||||
|
|
||||||
# all user domains
|
# all user domains
|
||||||
attribute userdomain;
|
attribute userdomain;
|
||||||
|
Loading…
Reference in New Issue
Block a user