trunk: switch newrole and run_init over to use nsswitch.
This commit is contained in:
parent
53da70cdaa
commit
013783b2b1
@ -1,5 +1,5 @@
|
||||
|
||||
policy_module(selinuxutil,1.7.3)
|
||||
policy_module(selinuxutil,1.7.4)
|
||||
|
||||
gen_require(`
|
||||
bool secure_mode;
|
||||
@ -257,6 +257,7 @@ term_relabel_all_user_ptys(newrole_t)
|
||||
term_getattr_unallocated_ttys(newrole_t)
|
||||
term_dontaudit_use_unallocated_ttys(newrole_t)
|
||||
|
||||
auth_use_nsswitch(newrole_t)
|
||||
auth_domtrans_chk_passwd(newrole_t)
|
||||
auth_rw_faillog(newrole_t)
|
||||
|
||||
@ -290,14 +291,6 @@ tunable_policy(`allow_polyinstantiation',`
|
||||
files_polyinstantiate_all(newrole_t)
|
||||
')
|
||||
|
||||
optional_policy(`
|
||||
nis_use_ypbind(newrole_t)
|
||||
')
|
||||
|
||||
optional_policy(`
|
||||
nscd_socket_use(newrole_t)
|
||||
')
|
||||
|
||||
########################################
|
||||
#
|
||||
# Restorecond local policy
|
||||
@ -380,6 +373,7 @@ selinux_compute_user_contexts(run_init_t)
|
||||
|
||||
term_dontaudit_list_ptys(run_init_t)
|
||||
|
||||
auth_use_nsswitch(run_init_t)
|
||||
auth_domtrans_chk_passwd(run_init_t)
|
||||
auth_dontaudit_read_shadow(run_init_t)
|
||||
|
||||
@ -408,10 +402,6 @@ optional_policy(`
|
||||
daemontools_domtrans_start(run_init_t)
|
||||
')
|
||||
|
||||
optional_policy(`
|
||||
nscd_socket_use(run_init_t)
|
||||
')
|
||||
|
||||
########################################
|
||||
#
|
||||
# semodule local policy
|
||||
|
Loading…
Reference in New Issue
Block a user