From 611bc9311d84392da9c09e1df9fdbea9861d24f0 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Wed, 24 Feb 2010 14:56:07 -0500
Subject: [PATCH] Improve documentation on miscfiles_read_localization().

---
 policy/modules/system/miscfiles.if | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/policy/modules/system/miscfiles.if b/policy/modules/system/miscfiles.if
index 783f38ef..5b840aa4 100644
--- a/policy/modules/system/miscfiles.if
+++ b/policy/modules/system/miscfiles.if
@@ -211,13 +211,25 @@ interface(`miscfiles_setattr_localization',`
 
 ########################################
 ## <summary>
-##	Allow process to read localization info
+##	Allow process to read localization information.
 ## </summary>
+## <desc>
+##	<p>
+##	Allow the specified domain to read the localization files.
+##	This is typically for time zone configuration files, such as
+##	/etc/localtime and files in /usr/share/zoneinfo.
+##	Typically, any domain which needs to know the GMT/UTC
+##	offset of the current timezone will need access
+##	to these files. Generally, it should be safe for any
+##	domain to read these files.
+##	</p>
+## </desc>
 ## <param name="domain">
 ##	<summary>
 ##	Domain allowed access.
 ##	</summary>
 ## </param>
+## <infoflow type="read" weight="10"/>
 #
 interface(`miscfiles_read_localization',`
 	gen_require(`