One more fix for unconfineduser.te
This commit is contained in:
parent
2b1fa01371
commit
fa5dd278c2
@ -19891,10 +19891,10 @@ index 0000000..cf6582f
|
|||||||
+
|
+
|
||||||
diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
|
diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
|
||||||
new file mode 100644
|
new file mode 100644
|
||||||
index 0000000..b93ceed
|
index 0000000..c212063
|
||||||
--- /dev/null
|
--- /dev/null
|
||||||
+++ b/policy/modules/roles/unconfineduser.te
|
+++ b/policy/modules/roles/unconfineduser.te
|
||||||
@@ -0,0 +1,333 @@
|
@@ -0,0 +1,335 @@
|
||||||
+policy_module(unconfineduser, 1.0.0)
|
+policy_module(unconfineduser, 1.0.0)
|
||||||
+
|
+
|
||||||
+########################################
|
+########################################
|
||||||
@ -20221,13 +20221,15 @@ index 0000000..b93ceed
|
|||||||
+ xserver_manage_home_fonts(unconfined_t)
|
+ xserver_manage_home_fonts(unconfined_t)
|
||||||
+')
|
+')
|
||||||
+
|
+
|
||||||
+gen_user(unconfined_u, user, unconfined_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)
|
|
||||||
+
|
+
|
||||||
+gen_require(`
|
+gen_require(`
|
||||||
+ attribute_role rpm_script_roles;
|
+ attribute_role rpm_script_roles;
|
||||||
+')
|
+')
|
||||||
+
|
+
|
||||||
+roleattribute unconfined_r rpm_script_roles;
|
+roleattribute unconfined_r rpm_script_roles;
|
||||||
|
+
|
||||||
|
+gen_user(unconfined_u, user, unconfined_r system_r, s0, s0 - mls_systemhigh, mcs_allcats)
|
||||||
|
+
|
||||||
diff --git a/policy/modules/roles/unprivuser.if b/policy/modules/roles/unprivuser.if
|
diff --git a/policy/modules/roles/unprivuser.if b/policy/modules/roles/unprivuser.if
|
||||||
index 3835596..fbca2be 100644
|
index 3835596..fbca2be 100644
|
||||||
--- a/policy/modules/roles/unprivuser.if
|
--- a/policy/modules/roles/unprivuser.if
|
||||||
|
Loading…
Reference in New Issue
Block a user