rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

reorder to work around module compiler bug

Browse Source
This commit is contained in:
Chris PeBenito 2005-11-10 19:41:23 +00:00
parent 70fe5a3e6e
commit 672a1570c8
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
refpolicy/policy/modules/system/unconfined.te
View File

@ -25,12 +25,6 @@ unconfined_domain_template(unconfined_t)
logging_send_syslog_msg(unconfined_t) logging_send_syslog_msg(unconfined_t)
ifdef(`targeted_policy',` ifdef(`targeted_policy',`
# compatibility for switching from strict
dominance { role secadm_r { role system_r; }}
dominance { role sysadm_r { role system_r; }}
dominance { role user_r { role system_r; }}
dominance { role staff_r { role system_r; }}
allow unconfined_t self:system syslog_read; allow unconfined_t self:system syslog_read;
dontaudit unconfined_t self:capability sys_module; dontaudit unconfined_t self:capability sys_module;

6
refpolicy/policy/modules/system/userdomain.te
View File

@ -64,6 +64,12 @@ ifdef(`targeted_policy',`
files_associate_tmp(user_home_dir_t) files_associate_tmp(user_home_dir_t)
fs_associate_tmpfs(user_home_dir_t) fs_associate_tmpfs(user_home_dir_t)
# compatibility for switching from strict
dominance { role secadm_r { role system_r; }}
dominance { role sysadm_r { role system_r; }}
dominance { role user_r { role system_r; }}
dominance { role staff_r { role system_r; }}
# dont need to use the full role_change() # dont need to use the full role_change()
allow sysadm_r system_r; allow sysadm_r system_r;
allow sysadm_r user_r; allow sysadm_r user_r;