rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

simplify since alias take care of it

This commit is contained in:
Chris PeBenito 2005-10-22 20:06:51 +00:00
parent 10b1f324d5
commit ae1d9afb5b
1 changed files with 16 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

62
refpolicy/policy/modules/system/userdomain.if
View File

@ -1815,44 +1815,23 @@ interface(`userdom_dontaudit_list_sysadm_home_dir',`
## </param>
#
interface(`userdom_create_sysadm_home',`
ifdef(`targeted_policy',`
gen_require(`
type user_home_dir_t, user_home_t;
')
gen_require(`
type sysadm_home_dir_t, sysadm_home_t;
')
allow $1 user_home_dir_t:dir rw_dir_perms;
ifelse(`$2',`',`
ifelse(`$3',`',`
type_transition $1 user_home_dir_t:file user_home_t;
',`
type_transition $1 user_home_dir_t:$3 user_home_t;
')
allow $1 sysadm_home_dir_t:dir rw_dir_perms;
ifelse(`$2',`',`
ifelse(`$3',`',`
type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
',`
ifelse(`$3',`',`
type_transition $1 user_home_dir_t:file $2;
',`
type_transition $1 user_home_dir_t:$3 $2;
')
type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
')
',`
gen_require(`
type sysadm_home_dir_t, sysadm_home_t;
')
allow $1 sysadm_home_dir_t:dir rw_dir_perms;
ifelse(`$2',`',`
ifelse(`$3',`',`
type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
',`
type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
')
ifelse(`$3',`',`
type_transition $1 sysadm_home_dir_t:file $2;
',`
ifelse(`$3',`',`
type_transition $1 sysadm_home_dir_t:file $2;
',`
type_transition $1 sysadm_home_dir_t:$3 $2;
')
type_transition $1 sysadm_home_dir_t:$3 $2;
')
')
')
@ -1866,20 +1845,11 @@ interface(`userdom_create_sysadm_home',`
## </param>
#
interface(`userdom_search_sysadm_home_subdirs',`
ifdef(`targeted_policy',`
gen_require(`
type user_home_dir_t, user_home_t;
')
allow $1 { user_home_dir_t user_home_t }:dir search_dir_perms;
',`
gen_require(`
type sysadm_home_dir_t, sysadm_home_t;
')
allow $1 { sysadm_home_dir_t sysadm_home_t }:dir search_dir_perms;
gen_require(`
type sysadm_home_dir_t, sysadm_home_t;
')
allow $1 { sysadm_home_dir_t sysadm_home_t }:dir search_dir_perms;
')
########################################