From d86d4f60693a9c63295e05afadc7c5f6fc9e8438 Mon Sep 17 00:00:00 2001 From: Jeremy Solt Date: Mon, 12 Apr 2010 15:23:36 -0400 Subject: [PATCH] Move optional policy to correct location for style --- policy/modules/services/kerberos.if | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/policy/modules/services/kerberos.if b/policy/modules/services/kerberos.if index f9691bd9..604f67bf 100644 --- a/policy/modules/services/kerberos.if +++ b/policy/modules/services/kerberos.if @@ -84,10 +84,6 @@ interface(`kerberos_use',` selinux_dontaudit_validate_context($1) seutil_dontaudit_read_file_contexts($1) - optional_policy(` - sssd_read_public_files($1) - ') - tunable_policy(`allow_kerberos',` allow $1 self:tcp_socket create_socket_perms; allow $1 self:udp_socket create_socket_perms; @@ -115,6 +111,10 @@ interface(`kerberos_use',` pcscd_stream_connect($1) ') ') + + optional_policy(` + sssd_read_public_files($1) + ') ') ########################################