rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

work around role dominance breakage in module compiler

Browse Source
This commit is contained in:
Chris PeBenito 2005-11-10 20:37:31 +00:00
parent 65b9361c0a
commit 3797efb0ce
2 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
refpolicy/policy/modules/system/domain.if
View File

@ -45,6 +45,14 @@ interface(`domain_base_type',`
tunable_policy(`allow_execmem',` tunable_policy(`allow_execmem',`
allow $1 self:process execmem; allow $1 self:process execmem;
') ')
# FIXME:
# hack until role dominance is fixed in
# the module compiler
role secadm_r types $1;
role sysadm_r types $1;
role user_r types $1;
role staff_r types $1;
') ')
') ')

8
refpolicy/policy/modules/system/userdomain.te
View File

@ -65,10 +65,10 @@ ifdef(`targeted_policy',`
fs_associate_tmpfs(user_home_dir_t) fs_associate_tmpfs(user_home_dir_t)
# compatibility for switching from strict # compatibility for switching from strict
dominance { role secadm_r { role system_r; }} # dominance { role secadm_r { role system_r; }}
dominance { role sysadm_r { role system_r; }} # dominance { role sysadm_r { role system_r; }}
dominance { role user_r { role system_r; }} # dominance { role user_r { role system_r; }}
dominance { role staff_r { role system_r; }} # dominance { role staff_r { role system_r; }}
# dont need to use the full role_change() # dont need to use the full role_change()
allow sysadm_r system_r; allow sysadm_r system_r;