diff --git a/refpolicy/policy/modules/system/libraries.if b/refpolicy/policy/modules/system/libraries.if index 7a8f43708..efb5097a3 100644 --- a/refpolicy/policy/modules/system/libraries.if +++ b/refpolicy/policy/modules/system/libraries.if @@ -2,7 +2,7 @@ ######################################## # -# libraries_use_dynamic_loader(domain +# libraries_use_dynamic_loader(domain) # define(`libraries_use_dynamic_loader',` requires_block_template(`$0'_depend) @@ -22,7 +22,7 @@ class file { getattr read execute }; ######################################## # -# libraries_legacy_use_dynamic_loader(domain +# libraries_legacy_use_dynamic_loader(domain) # define(`libraries_legacy_use_dynamic_loader',` requires_block_template(`$0'_depend) @@ -39,7 +39,7 @@ class file { execute execmod }; ######################################## # -# libraries_modify_dynamic_loader_cache(domain +# libraries_modify_dynamic_loader_cache(domain) # define(`libraries_modify_dynamic_loader_cache',` requires_block_template(`$0'_depend) @@ -53,7 +53,7 @@ class file { getattr read write }; ######################################## # -# libraries_read_shared_libraries(domain +# libraries_read_shared_libraries(domain) # define(`libraries_read_shared_libraries',` requires_block_template(`$0'_depend) @@ -72,23 +72,22 @@ class file { getattr read execute }; ######################################## # -# libraries_legacy_read_shared_libraries(domain +# libraries_legacy_read_shared_libraries(domain) # define(`libraries_legacy_read_shared_libraries',` requires_block_template(`$0'_depend) -libraries_read_shared_libraries($1,optional) +libraries_read_shared_libraries($1) allow $1 { shlib_t texrel_shlib_t }:file execmod; ') define(`libraries_legacy_read_shared_libraries_depend',` type shlib_t, texrel_shlib_t; class file execmod; -libraries_read_shared_libraries_depend ') ######################################## # -# libraries_read_static_libraries(domain +# libraries_read_static_libraries(domain) # define(`libraries_read_static_libraries',` requires_block_template(`$0'_depend) @@ -105,7 +104,7 @@ class file { getattr read }; ######################################## # -# libraries_execute_library_scripts(domain +# libraries_execute_library_scripts(domain) # define(`libraries_execute_library_scripts',` requires_block_template(`$0'_depend)