userdomain: Move enable_mls block in userdom_common_user_template().
This commit is contained in:
parent
39e550f9ee
commit
0b978fe777
|
@ -568,6 +568,17 @@ template(`userdom_common_user_template',`
|
||||||
# to this one.
|
# to this one.
|
||||||
seutil_dontaudit_signal_newrole($1_t)
|
seutil_dontaudit_signal_newrole($1_t)
|
||||||
|
|
||||||
|
ifndef(`enable_mls',`
|
||||||
|
tunable_policy(`user_write_removable',`
|
||||||
|
# Read/write floppies and other removable devices
|
||||||
|
storage_raw_read_removable_device($1_t)
|
||||||
|
storage_raw_write_removable_device($1_t)
|
||||||
|
',`
|
||||||
|
# Read floppies
|
||||||
|
storage_raw_read_removable_device($1_t)
|
||||||
|
')
|
||||||
|
')
|
||||||
|
|
||||||
tunable_policy(`user_direct_mouse',`
|
tunable_policy(`user_direct_mouse',`
|
||||||
dev_read_mouse($1_t)
|
dev_read_mouse($1_t)
|
||||||
')
|
')
|
||||||
|
@ -583,17 +594,6 @@ template(`userdom_common_user_template',`
|
||||||
term_getattr_all_ttys($1_t)
|
term_getattr_all_ttys($1_t)
|
||||||
')
|
')
|
||||||
|
|
||||||
ifndef(`enable_mls',`
|
|
||||||
tunable_policy(`user_write_removable',`
|
|
||||||
# Read/write floppies and other removable devices
|
|
||||||
storage_raw_read_removable_device($1_t)
|
|
||||||
storage_raw_write_removable_device($1_t)
|
|
||||||
',`
|
|
||||||
# Read floppies
|
|
||||||
storage_raw_read_removable_device($1_t)
|
|
||||||
')
|
|
||||||
')
|
|
||||||
|
|
||||||
tunable_policy(`user_write_removable',`
|
tunable_policy(`user_write_removable',`
|
||||||
# Read/write USB devices (e.g. external removable USB mass storage devices)
|
# Read/write USB devices (e.g. external removable USB mass storage devices)
|
||||||
dev_rw_generic_usb_dev($1_t)
|
dev_rw_generic_usb_dev($1_t)
|
||||||
|
|
Loading…
Reference in New Issue