rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

unexpand can_kerberos

Browse Source
This commit is contained in:
Chris PeBenito 2005-05-09 21:03:38 +00:00
parent a9a20ddaae
commit c18e825f57
1 changed files with 1 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
refpolicy/policy/modules/system/init.te
View File

@ -311,12 +311,7 @@ allow initrc_t home_type:file r_file_perms;
allow initrc_t udev_runtime_t:file rw_file_perms;
# for lsof in shutdown scripts
optional_policy(`kerberos.te',`
if (allow_kerberos) {
can_network_client(initrc_t, `kerberos_port_t')
can_resolve(initrc_t)
}
') dnl kerberos.te
can_kerberos(initrc_t)
dontaudit initrc_t krb5_conf_t:file write;
allow initrc_t krb5_conf_t:file { getattr read };