policycoreutils: semanage: dontaudit off should work

The OBJECT was not being set early enough and thus would miss the checks
for things like deleteall and extract.  Move the setting of OBJECT where
it happens for everything else.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
Dan Walsh 2012-05-18 09:52:57 -04:00 committed by Eric Paris
parent 7753c11341
commit 14f81c15a5

View File

@ -373,6 +373,9 @@ Object-specific Options (see above):
if object == "permissive":
OBJECT = seobject.permissiveRecords(store)
if object == "dontaudit":
OBJECT = seobject.dontauditClass(store)
if list:
if object == "boolean":
OBJECT.list(heading, locallist, use_file)
@ -395,7 +398,6 @@ Object-specific Options (see above):
target = cmds[0]
if object == "dontaudit":
OBJECT = seobject.dontauditClass(store)
OBJECT.toggle(target)
return