diff --git a/policy/modules/services/ppp.te b/policy/modules/services/ppp.te index 2af42e7c3..a2d43a9fb 100644 --- a/policy/modules/services/ppp.te +++ b/policy/modules/services/ppp.te @@ -1,4 +1,4 @@ -policy_module(ppp, 1.12.0) +policy_module(ppp, 1.12.1) ######################################## # @@ -10,7 +10,7 @@ policy_module(ppp, 1.12.0) ## Allow pppd to load kernel modules for certain modems ##

## -gen_tunable(pppd_can_insmod, false) +gen_bool(pppd_can_insmod, false) ## ##

@@ -187,9 +187,14 @@ optional_policy(` ') optional_policy(` - tunable_policy(`pppd_can_insmod && ! secure_mode_insmod',` - modutils_domtrans_insmod_uncond(pppd_t) + # The toolchain does not support nested conditionals + gen_require(` + bool secure_mode_insmod; ') + + if (pppd_can_insmod && ! secure_mode_insmod) { + modutils_domtrans_insmod_uncond(pppd_t) + } ') optional_policy(`