tweaks from dan
This commit is contained in:
parent
95f82b0de8
commit
9cc2ccc4ed
@ -1,7 +1,6 @@
|
|||||||
- Fixes from Dan Walsh for ldap and authlogin.
|
- Miscellaneous fixes from Dan Walsh.
|
||||||
- Fix corenetwork gen_context()'s to expand during the policy
|
- Fix corenetwork gen_context()'s to expand during the policy
|
||||||
build phase instead of during the generation phase.
|
build phase instead of during the generation phase.
|
||||||
- DISTRO=redhat now implies DIRECT_INITRC=y.
|
|
||||||
- Added policies:
|
- Added policies:
|
||||||
amanda
|
amanda
|
||||||
avahi
|
avahi
|
||||||
|
@ -142,9 +142,6 @@ endif
|
|||||||
# enable distribution-specific policy
|
# enable distribution-specific policy
|
||||||
ifneq ($(DISTRO),)
|
ifneq ($(DISTRO),)
|
||||||
override M4PARAM += -D distro_$(DISTRO)
|
override M4PARAM += -D distro_$(DISTRO)
|
||||||
ifeq ($(DISTRO),redhat)
|
|
||||||
override DIRECT_INITRC := y
|
|
||||||
endif
|
|
||||||
endif
|
endif
|
||||||
|
|
||||||
ifneq ($(OUTPUT_POLICY),)
|
ifneq ($(OUTPUT_POLICY),)
|
||||||
|
@ -2465,11 +2465,15 @@ interface(`userdom_write_unpriv_user_tmp',`
|
|||||||
## </param>
|
## </param>
|
||||||
#
|
#
|
||||||
interface(`userdom_dontaudit_use_unpriv_user_tty',`
|
interface(`userdom_dontaudit_use_unpriv_user_tty',`
|
||||||
|
ifdef(`targeted_policy',`
|
||||||
|
term_dontaudit_use_generic_pty($1)
|
||||||
|
',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
attribute user_ttynode;
|
attribute user_ttynode;
|
||||||
')
|
')
|
||||||
|
|
||||||
dontaudit $1 user_ttynode:chr_file rw_file_perms;
|
dontaudit $1 user_ttynode:chr_file rw_file_perms;
|
||||||
|
')
|
||||||
')
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
Loading…
Reference in New Issue
Block a user