RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-30 07:16:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

auth: Move optional out of auth_use_pam_systemd() to callers.

Browse Source
This commit is contained in:
Chris PeBenito 2017-02-26 12:08:02 -05:00
parent 15f0cc4fe1
commit 10388e1319
3 changed files with 10 additions and 6 deletions
policy/modules
admin
su.if
system
authlogin.ifselinuxutil.te

5
policy/modules/admin/su.if
View File

@ -184,7 +184,6 @@ template(`su_role_template',`
auth_dontaudit_read_shadow($1_su_t)
auth_use_nsswitch($1_su_t)
auth_rw_faillog($1_su_t)
auth_use_pam_systemd($1_su_t)
corecmd_search_bin($1_su_t)
@ -221,6 +220,10 @@ template(`su_role_template',`
')
')
optional_policy(`
auth_use_pam_systemd($1_su_t)
')
tunable_policy(`allow_polyinstantiation',`
fs_mount_xattr_fs($1_su_t)
fs_unmount_xattr_fs($1_su_t)

6
policy/modules/system/authlogin.if
View File

@ -93,10 +93,8 @@ interface(`auth_use_pam',`
## </param>
#
interface(`auth_use_pam_systemd',`
optional_policy(`
dbus_system_bus_client($1)
systemd_dbus_chat_logind($1)
')
dbus_system_bus_client($1)
systemd_dbus_chat_logind($1)
')
########################################

5
policy/modules/system/selinuxutil.te
View File

@ -281,7 +281,6 @@ auth_use_nsswitch(newrole_t)
auth_run_chk_passwd(newrole_t, newrole_roles)
auth_run_upd_passwd(newrole_t, newrole_roles)
auth_rw_faillog(newrole_t)
auth_use_pam_systemd(newrole_t)
# Write to utmp.
init_rw_utmp(newrole_t)
@ -310,6 +309,10 @@ ifdef(`init_systemd',`
')
')
optional_policy(`
auth_use_pam_systemd(newrole_t)
')
optional_policy(`
dbus_system_bus_client(newrole_t)