add compute_av for doing rootok check

2006-05-25 13:14:08 +00:00 · 2006-05-25 13:14:08 +00:00 · 29a0519186
parent c890249a4c
commit 29a0519186
2 changed files with 4 additions and 1 deletions
--- a/refpolicy/policy/modules/admin/su.if
+++ b/refpolicy/policy/modules/admin/su.if
@ -71,6 +71,9 @@ template(`su_restricted_domain_template', `
 	files_search_var_lib($1_su_t)
 	files_dontaudit_getattr_tmp_dirs($1_su_t)

+	# for the rootok check
+	selinux_compute_access_vector($1_su_t)
+
 	auth_domtrans_chk_passwd($1_su_t)
 	auth_dontaudit_read_shadow($1_su_t)
 	auth_use_nsswitch($1_su_t)
--- a/refpolicy/policy/modules/admin/su.te
+++ b/refpolicy/policy/modules/admin/su.te
@ -1,5 +1,5 @@

-policy_module(su,1.3.2)
+policy_module(su,1.3.3)

 ########################################
 #