diff --git a/refpolicy/policy/modules/system/init.if b/refpolicy/policy/modules/system/init.if index 1409afaf..766933dc 100644 --- a/refpolicy/policy/modules/system/init.if +++ b/refpolicy/policy/modules/system/init.if @@ -194,7 +194,7 @@ interface(`init_getpgid',` type init_t; # cjp: remove this when init_t decl is moved back to this module - type initctl_t; + attribute direct_run_init; ') allow $1 init_t:process getpgid; @@ -215,7 +215,7 @@ interface(`init_signull',` type init_t; # cjp: remove this when init_t decl is moved back to this module - type initctl_t; + attribute direct_run_init; ') allow $1 init_t:process signull; @@ -236,7 +236,7 @@ interface(`init_sigchld',` type init_t; # cjp: remove this when init_t decl is moved back to this module - type initctl_t; + attribute direct_run_init; ') allow $1 init_t:process sigchld; @@ -251,7 +251,7 @@ interface(`init_use_fds',` type init_t; # cjp: remove this when init_t decl is moved back to this module - type initctl_t; + attribute direct_run_init; ') allow $1 init_t:fd use; @@ -266,7 +266,7 @@ interface(`init_dontaudit_use_fds',` type init_t; # cjp: remove this when init_t decl is moved back to this module - type initctl_t; + attribute direct_run_init; ') dontaudit $1 init_t:fd use; @@ -287,7 +287,7 @@ interface(`init_udp_send',` type init_t; # cjp: remove this when init_t decl is moved back to this module - type initctl_t; + attribute direct_run_init; ') allow $1 init_t:udp_socket sendto;