One more fix for unconfineduser.te

This commit is contained in:
Miroslav Grepl 2014-01-19 21:39:40 +01:00
parent 2b1fa01371
commit fa5dd278c2
1 changed files with 5 additions and 3 deletions

View File

@ -19891,10 +19891,10 @@ index 0000000..cf6582f
+
diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
new file mode 100644
index 0000000..b93ceed
index 0000000..c212063
--- /dev/null
+++ b/policy/modules/roles/unconfineduser.te
@@ -0,0 +1,333 @@
@@ -0,0 +1,335 @@
+policy_module(unconfineduser, 1.0.0)
+
+########################################
@ -20221,13 +20221,15 @@ index 0000000..b93ceed
+ xserver_manage_home_fonts(unconfined_t)
+')
+
+gen_user(unconfined_u, user, unconfined_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)
+
+gen_require(`
+ attribute_role rpm_script_roles;
+')
+
+roleattribute unconfined_r rpm_script_roles;
+
+gen_user(unconfined_u, user, unconfined_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)
+
diff --git a/policy/modules/roles/unprivuser.if b/policy/modules/roles/unprivuser.if
index 3835596..fbca2be 100644
--- a/policy/modules/roles/unprivuser.if