fix ordering bug
This commit is contained in:
parent
3ef029db7c
commit
5b4ff3a104
@ -53,9 +53,6 @@ neverallow ~can_read_shadow_passwords shadow_t:file read;
|
||||
neverallow ~can_write_shadow_passwords shadow_t:file { create write };
|
||||
neverallow ~can_relabelto_shadow_passwords shadow_t:file relabelto;
|
||||
|
||||
authlogin_common_auth_domain_template(system)
|
||||
role system_r types system_chkpwd_t;
|
||||
|
||||
type utempter_t;
|
||||
domain_type(utempter_t)
|
||||
|
||||
@ -72,6 +69,10 @@ files_type(var_auth_t)
|
||||
type wtmp_t;
|
||||
logging_log_file(wtmp_t)
|
||||
|
||||
# reorder to work around require-then-decare bug
|
||||
authlogin_common_auth_domain_template(system)
|
||||
role system_r types system_chkpwd_t;
|
||||
|
||||
########################################
|
||||
#
|
||||
# PAM local policy
|
||||
|
Loading…
Reference in New Issue
Block a user