fix ordering bug
This commit is contained in:
parent
3ef029db7c
commit
5b4ff3a104
|
@ -53,9 +53,6 @@ neverallow ~can_read_shadow_passwords shadow_t:file read;
|
||||||
neverallow ~can_write_shadow_passwords shadow_t:file { create write };
|
neverallow ~can_write_shadow_passwords shadow_t:file { create write };
|
||||||
neverallow ~can_relabelto_shadow_passwords shadow_t:file relabelto;
|
neverallow ~can_relabelto_shadow_passwords shadow_t:file relabelto;
|
||||||
|
|
||||||
authlogin_common_auth_domain_template(system)
|
|
||||||
role system_r types system_chkpwd_t;
|
|
||||||
|
|
||||||
type utempter_t;
|
type utempter_t;
|
||||||
domain_type(utempter_t)
|
domain_type(utempter_t)
|
||||||
|
|
||||||
|
@ -72,6 +69,10 @@ files_type(var_auth_t)
|
||||||
type wtmp_t;
|
type wtmp_t;
|
||||||
logging_log_file(wtmp_t)
|
logging_log_file(wtmp_t)
|
||||||
|
|
||||||
|
# reorder to work around require-then-decare bug
|
||||||
|
authlogin_common_auth_domain_template(system)
|
||||||
|
role system_r types system_chkpwd_t;
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# PAM local policy
|
# PAM local policy
|
||||||
|
|
Loading…
Reference in New Issue