simplify since alias take care of it
This commit is contained in:
parent
10b1f324d5
commit
ae1d9afb5b
@ -1815,44 +1815,23 @@ interface(`userdom_dontaudit_list_sysadm_home_dir',`
|
|||||||
## </param>
|
## </param>
|
||||||
#
|
#
|
||||||
interface(`userdom_create_sysadm_home',`
|
interface(`userdom_create_sysadm_home',`
|
||||||
ifdef(`targeted_policy',`
|
gen_require(`
|
||||||
gen_require(`
|
type sysadm_home_dir_t, sysadm_home_t;
|
||||||
type user_home_dir_t, user_home_t;
|
')
|
||||||
')
|
|
||||||
|
|
||||||
allow $1 user_home_dir_t:dir rw_dir_perms;
|
allow $1 sysadm_home_dir_t:dir rw_dir_perms;
|
||||||
ifelse(`$2',`',`
|
|
||||||
ifelse(`$3',`',`
|
ifelse(`$2',`',`
|
||||||
type_transition $1 user_home_dir_t:file user_home_t;
|
ifelse(`$3',`',`
|
||||||
',`
|
type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
|
||||||
type_transition $1 user_home_dir_t:$3 user_home_t;
|
|
||||||
')
|
|
||||||
',`
|
',`
|
||||||
ifelse(`$3',`',`
|
type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
|
||||||
type_transition $1 user_home_dir_t:file $2;
|
|
||||||
',`
|
|
||||||
type_transition $1 user_home_dir_t:$3 $2;
|
|
||||||
')
|
|
||||||
')
|
')
|
||||||
',`
|
',`
|
||||||
gen_require(`
|
ifelse(`$3',`',`
|
||||||
type sysadm_home_dir_t, sysadm_home_t;
|
type_transition $1 sysadm_home_dir_t:file $2;
|
||||||
')
|
|
||||||
|
|
||||||
allow $1 sysadm_home_dir_t:dir rw_dir_perms;
|
|
||||||
|
|
||||||
ifelse(`$2',`',`
|
|
||||||
ifelse(`$3',`',`
|
|
||||||
type_transition $1 sysadm_home_dir_t:file sysadm_home_t;
|
|
||||||
',`
|
|
||||||
type_transition $1 sysadm_home_dir_t:$3 sysadm_home_t;
|
|
||||||
')
|
|
||||||
',`
|
',`
|
||||||
ifelse(`$3',`',`
|
type_transition $1 sysadm_home_dir_t:$3 $2;
|
||||||
type_transition $1 sysadm_home_dir_t:file $2;
|
|
||||||
',`
|
|
||||||
type_transition $1 sysadm_home_dir_t:$3 $2;
|
|
||||||
')
|
|
||||||
')
|
')
|
||||||
')
|
')
|
||||||
')
|
')
|
||||||
@ -1866,20 +1845,11 @@ interface(`userdom_create_sysadm_home',`
|
|||||||
## </param>
|
## </param>
|
||||||
#
|
#
|
||||||
interface(`userdom_search_sysadm_home_subdirs',`
|
interface(`userdom_search_sysadm_home_subdirs',`
|
||||||
ifdef(`targeted_policy',`
|
gen_require(`
|
||||||
gen_require(`
|
type sysadm_home_dir_t, sysadm_home_t;
|
||||||
type user_home_dir_t, user_home_t;
|
|
||||||
')
|
|
||||||
|
|
||||||
allow $1 { user_home_dir_t user_home_t }:dir search_dir_perms;
|
|
||||||
|
|
||||||
',`
|
|
||||||
gen_require(`
|
|
||||||
type sysadm_home_dir_t, sysadm_home_t;
|
|
||||||
')
|
|
||||||
|
|
||||||
allow $1 { sysadm_home_dir_t sysadm_home_t }:dir search_dir_perms;
|
|
||||||
')
|
')
|
||||||
|
|
||||||
|
allow $1 { sysadm_home_dir_t sysadm_home_t }:dir search_dir_perms;
|
||||||
')
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
Loading…
Reference in New Issue
Block a user