From 2c91f6377de4f96a3a9ca5c80c3b433b6d717d6a Mon Sep 17 00:00:00 2001
From: Christopher Pardy <cpardy@redhat.com>
Date: Mon, 6 Jul 2009 14:01:01 -0400
Subject: [PATCH] semodule: maintain old functionality

Patch for semodule command
semodule -B
Will now turn on dontaudit rules
semodule -DB
Will turn off dontaudit rules.
With other patch all other semanage commands will maintain state.

Created by Dan Walsh

Signed-off-by: Christopher Pardy <cpardy@redhat.com>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 policycoreutils/semodule/semodule.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policycoreutils/semodule/semodule.c b/policycoreutils/semodule/semodule.c
index f052db3e..f74a04a3 100644
--- a/policycoreutils/semodule/semodule.c
+++ b/policycoreutils/semodule/semodule.c
@@ -421,6 +421,9 @@ int main(int argc, char *argv[])
 			semanage_set_rebuild(sh, 1);
 		if (disable_dontaudit)
 			semanage_set_disable_dontaudit(sh, 1);
+		else if (build)
+			semanage_set_disable_dontaudit(sh, 0);
+
 		result = semanage_commit(sh);
 	}