Silence symlink reading by setfiles since it doesn't follow symlinks anyway.

This commit is contained in:
Chris PeBenito 2013-09-27 17:09:43 -04:00
parent 57f00181ee
commit 20471346ed

View File

@ -1,4 +1,4 @@
policy_module(selinuxutil, 1.17.1)
policy_module(selinuxutil, 1.17.2)
gen_require(`
bool secure_mode;
@ -554,6 +554,7 @@ files_read_etc_files(setfiles_t)
files_list_all(setfiles_t)
files_relabel_all_files(setfiles_t)
files_read_usr_symlinks(setfiles_t)
files_dontaudit_read_all_symlinks(setfiles_t)
fs_getattr_xattr_fs(setfiles_t)
fs_list_all(setfiles_t)