Fixed an allow that should have been a dontaudit
This commit is contained in:
parent
977b1d65f5
commit
d2c57395ab
@ -8,11 +8,11 @@
|
|||||||
## Domain allowed access.
|
## Domain allowed access.
|
||||||
## </param>
|
## </param>
|
||||||
#
|
#
|
||||||
interface(`bluetooth_read_helper_files',`
|
interface(`bluetooth_dontaudit_read_helper_files',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
type bluetooth_helper_t;
|
type bluetooth_helper_t;
|
||||||
')
|
')
|
||||||
|
|
||||||
allow $1 bluetooth_helper_t:dir search;
|
dontaudit $1 bluetooth_helper_t:dir search;
|
||||||
allow $1 bluetooth_helper_t:file { read getattr };
|
dontaudit $1 bluetooth_helper_t:file { read getattr };
|
||||||
')
|
')
|
||||||
|
@ -112,7 +112,7 @@ ifdef(`targeted_policy', `
|
|||||||
')
|
')
|
||||||
|
|
||||||
optional_policy(`bluetooth.te',`
|
optional_policy(`bluetooth.te',`
|
||||||
bluetooth_read_helper_files(NetworkManager_t)
|
bluetooth_dontaudit_read_helper_files(NetworkManager_t)
|
||||||
')
|
')
|
||||||
|
|
||||||
optional_policy(`consoletype.te',`
|
optional_policy(`consoletype.te',`
|
||||||
|
Loading…
Reference in New Issue
Block a user