nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Do not audit the use of portage' filedescriptors from load_policy_t

Browse Source 
During build and eventual activation of the base policy, the load_policy_t
domain attempts to use a portage file descriptor. However, this serves no
purpose (the loading is done correctly and everything is logged
appropriately).

Hence, we dontaudit this use.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-08-23 15:39:56 +02:00 committed by Chris PeBenito
parent 137f7366ee
commit 5d77246f5f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/system/selinuxutil.te
View File

@ -199,6 +199,10 @@ ifdef(`hide_broken_symptoms',`
')
')
optional_policy(`
portage_dontaudit_use_fds(load_policy_t)
')
########################################
#
# Newrole local policy