Fixed an allow that should have been a dontaudit
This commit is contained in:
parent
977b1d65f5
commit
d2c57395ab
@ -8,11 +8,11 @@
|
||||
## Domain allowed access.
|
||||
## </param>
|
||||
#
|
||||
interface(`bluetooth_read_helper_files',`
|
||||
interface(`bluetooth_dontaudit_read_helper_files',`
|
||||
gen_require(`
|
||||
type bluetooth_helper_t;
|
||||
')
|
||||
|
||||
allow $1 bluetooth_helper_t:dir search;
|
||||
allow $1 bluetooth_helper_t:file { read getattr };
|
||||
dontaudit $1 bluetooth_helper_t:dir search;
|
||||
dontaudit $1 bluetooth_helper_t:file { read getattr };
|
||||
')
|
||||
|
@ -112,7 +112,7 @@ ifdef(`targeted_policy', `
|
||||
')
|
||||
|
||||
optional_policy(`bluetooth.te',`
|
||||
bluetooth_read_helper_files(NetworkManager_t)
|
||||
bluetooth_dontaudit_read_helper_files(NetworkManager_t)
|
||||
')
|
||||
|
||||
optional_policy(`consoletype.te',`
|
||||
|
Loading…
Reference in New Issue
Block a user