From 8365be43946531aa95db5ee1cfaabcdd4dc09bb7 Mon Sep 17 00:00:00 2001 From: Sven Vermeulen Date: Sat, 13 Aug 2011 21:01:20 +0200 Subject: [PATCH] HAL support is not mandatory for ConsoleKit The current consolekit policy definition has hal_ptrace(consolekit_t) in its main body. However, HAL support within consolekit is not mandatory. As such, this call should be within an optional_policy(). Signed-off-by: Sven Vermeulen --- policy/modules/services/consolekit.te | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/policy/modules/services/consolekit.te b/policy/modules/services/consolekit.te index dd71359ee..46cd22287 100644 --- a/policy/modules/services/consolekit.te +++ b/policy/modules/services/consolekit.te @@ -72,8 +72,6 @@ miscfiles_read_localization(consolekit_t) userdom_dontaudit_read_user_home_content_files(consolekit_t) userdom_read_user_tmp_files(consolekit_t) -hal_ptrace(consolekit_t) - tunable_policy(`use_nfs_home_dirs',` fs_read_nfs_files(consolekit_t) ') @@ -98,6 +96,10 @@ optional_policy(` ') ') +optional_policy(` + hal_ptrace(consolekit_t) +') + optional_policy(` policykit_dbus_chat(consolekit_t) policykit_domtrans_auth(consolekit_t)