have can_exec add a require block

2005-06-16 20:30:07 +00:00 · 2005-06-16 20:30:07 +00:00 · 8c2f3ac695
parent bd113c3a8b
commit 8c2f3ac695
1 changed files with 7 additions and 1 deletions
--- a/refpolicy/policy/support/misc_macros.spt
+++ b/refpolicy/policy/support/misc_macros.spt
@ -19,4 +19,10 @@ define(`shiftn',`ifelse($1,0,`shift($*)',`shiftn(decr($1),shift(shift($*)))')')
 #
 define(`context_template',`ifdef(`enable_mls',`$1:$2',`$1')') dnl

-define(`can_exec',`allow $1 $2:file { rx_file_perms execute_no_trans };')
+define(`can_exec',`
+	gen_require(`
+		class file { rx_file_perms execute_no_trans };
+	')
+
+	allow $1 $2:file { rx_file_perms execute_no_trans };
+')