su: do not audit attempts to search /root.

Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-04 20:23:43 +02:00 · 2010-10-04 20:23:43 +02:00 · 6a05763d51
parent bd51fa387c
commit 6a05763d51
1 changed files with 1 additions and 0 deletions
--- a/policy/modules/admin/su.if
+++ b/policy/modules/admin/su.if
@ -223,6 +223,7 @@ template(`su_role_template',`
 	files_read_etc_runtime_files($1_su_t)
 	files_search_var_lib($1_su_t)
 	files_dontaudit_getattr_tmp_dirs($1_su_t)
+	files_dontaudit_list_default($1_su_t)

 	init_dontaudit_use_fds($1_su_t)
 	# Write to utmp.