Use domtrans_pattern where possible.
This commit is contained in:
parent
1e2abee10b
commit
3c4ffa3294
@ -180,10 +180,7 @@ userdom_write_user_tmp_files(ssh_t)
|
|||||||
userdom_read_user_home_content_symlinks(ssh_t)
|
userdom_read_user_home_content_symlinks(ssh_t)
|
||||||
|
|
||||||
tunable_policy(`allow_ssh_keysign',`
|
tunable_policy(`allow_ssh_keysign',`
|
||||||
domain_auto_trans(ssh_t, ssh_keysign_exec_t, ssh_keysign_t)
|
domtrans_pattern(ssh_t, ssh_keysign_exec_t, ssh_keysign_t)
|
||||||
allow ssh_keysign_t ssh_t:fd use;
|
|
||||||
allow ssh_keysign_t ssh_t:process sigchld;
|
|
||||||
allow ssh_keysign_t ssh_t:fifo_file rw_file_perms;
|
|
||||||
')
|
')
|
||||||
|
|
||||||
tunable_policy(`use_nfs_home_dirs',`
|
tunable_policy(`use_nfs_home_dirs',`
|
||||||
|
Loading…
Reference in New Issue
Block a user