add compute_av for doing rootok check
This commit is contained in:
parent
c890249a4c
commit
29a0519186
|
@ -71,6 +71,9 @@ template(`su_restricted_domain_template', `
|
||||||
files_search_var_lib($1_su_t)
|
files_search_var_lib($1_su_t)
|
||||||
files_dontaudit_getattr_tmp_dirs($1_su_t)
|
files_dontaudit_getattr_tmp_dirs($1_su_t)
|
||||||
|
|
||||||
|
# for the rootok check
|
||||||
|
selinux_compute_access_vector($1_su_t)
|
||||||
|
|
||||||
auth_domtrans_chk_passwd($1_su_t)
|
auth_domtrans_chk_passwd($1_su_t)
|
||||||
auth_dontaudit_read_shadow($1_su_t)
|
auth_dontaudit_read_shadow($1_su_t)
|
||||||
auth_use_nsswitch($1_su_t)
|
auth_use_nsswitch($1_su_t)
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
|
|
||||||
policy_module(su,1.3.2)
|
policy_module(su,1.3.3)
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
|
|
Loading…
Reference in New Issue