rework nis_use_ypbind since optionals dont work in conditionals

2005-09-23 22:14:54 +00:00 · 2005-09-23 22:14:54 +00:00 · b9ae3aab39
parent fa67570d9a
commit b9ae3aab39
1 changed files with 6 additions and 4 deletions
--- a/refpolicy/policy/modules/services/nis.if
+++ b/refpolicy/policy/modules/services/nis.if
@ -45,13 +45,15 @@ interface(`nis_use_ypbind',`
 		corenet_dontaudit_tcp_connect_all_reserved_ports($1)

 		sysnet_read_config($1)
-
-		optional_policy(`mount.te',`
-			mount_send_nfs_client_request($1)
-		')
 	',`
 		dontaudit $1 var_yp_t:dir search;
 	')
+
+	optional_policy(`mount.te',`
+		tunable_policy(`allow_ypbind',`
+			mount_send_nfs_client_request($1)
+		')
+	')
 ')

 ########################################