From b9ae3aab3919662a95d3766829fe6fa53bb68b04 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 23 Sep 2005 22:14:54 +0000 Subject: [PATCH] rework nis_use_ypbind since optionals dont work in conditionals --- refpolicy/policy/modules/services/nis.if | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/refpolicy/policy/modules/services/nis.if b/refpolicy/policy/modules/services/nis.if index 27328b32..2a2a5fd4 100644 --- a/refpolicy/policy/modules/services/nis.if +++ b/refpolicy/policy/modules/services/nis.if @@ -45,13 +45,15 @@ interface(`nis_use_ypbind',` corenet_dontaudit_tcp_connect_all_reserved_ports($1) sysnet_read_config($1) - - optional_policy(`mount.te',` - mount_send_nfs_client_request($1) - ') ',` dontaudit $1 var_yp_t:dir search; ') + + optional_policy(`mount.te',` + tunable_policy(`allow_ypbind',` + mount_send_nfs_client_request($1) + ') + ') ') ########################################