RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

remove setbool auditallow, except for distro_rhel4.

This commit is contained in:
Chris PeBenito 2006-07-13 14:22:21 +00:00
parent 2defa77f39
commit 133000c286
3 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Changelog
View File

@ -1,3 +1,4 @@
- Remove setbool auditallow, except for RHEL4.
- Change eventpollfs to task SID labeling. - Change eventpollfs to task SID labeling.
- Add key support from Michael LeMay. - Add key support from Michael LeMay.
- Add ftpdctl domain to ftp, from Paul Howarth. - Add ftpdctl domain to ftp, from Paul Howarth.

6
policy/modules/kernel/selinux.if
View File

@ -214,7 +214,11 @@ interface(`selinux_set_boolean',`
if(!secure_mode_policyload) { if(!secure_mode_policyload) {
allow $1 security_t:security setbool; allow $1 security_t:security setbool;
auditallow $1 security_t:security setbool;
ifdef(`distro_rhel4',`
# needed for systems without audit support
auditallow $1 security_t:security setbool;
')
} }
') ')

7
policy/modules/kernel/selinux.te
View File

@ -40,5 +40,10 @@ allow selinux_unconfined_type security_t:security ~{ load_policy setenforce setb
if(!secure_mode_policyload) { if(!secure_mode_policyload) {
allow selinux_unconfined_type security_t:security { load_policy setenforce setbool }; allow selinux_unconfined_type security_t:security { load_policy setenforce setbool };
auditallow selinux_unconfined_type security_t:security { load_policy setenforce setbool }; auditallow selinux_unconfined_type security_t:security { load_policy setenforce };
ifdef(`distro_rhel4',`
# needed for systems without audit support
auditallow selinux_unconfined_type security_t:security setbool;
')
} }