From 263721b9a4b8ca2156c90d5ae92da97b0ec9c8b5 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 19 May 2006 20:02:41 +0000 Subject: [PATCH] dontaudit just the kernel fd use, the others may indicate problems for other reasons. --- refpolicy/policy/modules/system/init.if | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/refpolicy/policy/modules/system/init.if b/refpolicy/policy/modules/system/init.if index 2b54658f..0b2dd5a6 100644 --- a/refpolicy/policy/modules/system/init.if +++ b/refpolicy/policy/modules/system/init.if @@ -37,9 +37,7 @@ interface(`init_domain',` # RHEL4 systems seem to have a stray # fds open from the initrd ifdef(`distro_rhel4',` - kernel_dontaudit_use_fd($1) - storage_dontaudit_read_fixed_disk($1) - files_dontaudit_read_root_file($1) + kernel_dontaudit_use_fds($1) ') ') ') @@ -89,9 +87,7 @@ interface(`init_daemon_domain',` # RHEL4 systems seem to have a stray # fds open from the initrd ifdef(`distro_rhel4',` - kernel_dontaudit_use_fd($1) - storage_dontaudit_read_fixed_disk($1) - files_dontaudit_read_root_file($1) + kernel_dontaudit_use_fds($1) ') ') @@ -166,9 +162,7 @@ interface(`init_system_domain',` # RHEL4 systems seem to have a stray # fds open from the initrd ifdef(`distro_rhel4',` - kernel_dontaudit_use_fd($1) - storage_dontaudit_read_fixed_disk($1) - files_dontaudit_read_root_file($1) + kernel_dontaudit_use_fds($1) ') ') ')