From 2dfd2b93a9fbeb06e1d767ae9222b4bfe8914126 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Fri, 19 Oct 2012 09:18:19 -0400
Subject: [PATCH] Move kernel_stream_connect() declaration.

---
 policy/modules/kernel/kernel.if | 38 ++++++++++++++++-----------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if
index 7cbf5d649..649e458b0 100644
--- a/policy/modules/kernel/kernel.if
+++ b/policy/modules/kernel/kernel.if
@@ -252,6 +252,25 @@ interface(`kernel_rw_pipes',`
 	allow $1 kernel_t:fifo_file { read write };
 ')
 
+########################################
+## <summary>
+##	Connect to kernel using a unix
+##	domain stream socket.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`kernel_stream_connect',`
+	gen_require(`
+		type kernel_t;
+	')
+
+	allow $1 kernel_t:unix_stream_socket connectto;
+')
+
 ########################################
 ## <summary>
 ##	Read and write kernel unix datagram sockets.
@@ -563,25 +582,6 @@ interface(`kernel_dontaudit_request_load_module',`
 	dontaudit $1 kernel_t:system module_request;
 ')
 
-########################################
-## <summary>
-##	Connect to kernel using a unix
-##	domain stream socket.
-## </summary>
-## <param name="domain">
-##	<summary>
-##	Domain allowed access.
-##	</summary>
-## </param>
-#
-interface(`kernel_stream_connect',`
-	gen_require(`
-		type kernel_t;
-	')
-
-	allow $1 kernel_t:unix_stream_socket connectto;
-')
-
 ########################################
 ## <summary>
 ##	Get information on all System V IPC objects.