From aecd12c7b0afe052555cd49da7f4a306ae457fcf Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Mon, 26 Sep 2011 09:53:23 -0400 Subject: [PATCH] Move secure_mode_policyload into selinux module as that is the only place it is used. --- policy/global_booleans | 9 --------- policy/modules/kernel/selinux.te | 9 +++++++++ 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/policy/global_booleans b/policy/global_booleans index 71ff1415b..66e85ea54 100644 --- a/policy/global_booleans +++ b/policy/global_booleans @@ -12,12 +12,3 @@ ##

## gen_bool(secure_mode,false) - -## -##

-## boolean to determine whether the system permits loading policy, setting -## enforcing mode, and changing boolean values. Set this to true and you -## have to reboot to set it back -##

-##
-gen_bool(secure_mode_policyload,false) diff --git a/policy/modules/kernel/selinux.te b/policy/modules/kernel/selinux.te index 4baa2b968..ebb68b7f3 100644 --- a/policy/modules/kernel/selinux.te +++ b/policy/modules/kernel/selinux.te @@ -5,6 +5,15 @@ policy_module(selinux, 1.10.0) # Declarations # +## +##

+## Boolean to determine whether the system permits loading policy, setting +## enforcing mode, and changing boolean values. Set this to true and you +## have to reboot to set it back. +##

+##
+gen_bool(secure_mode_policyload,false) + attribute boolean_type; attribute can_load_policy; attribute can_setenforce;