From aecd12c7b0afe052555cd49da7f4a306ae457fcf Mon Sep 17 00:00:00 2001
From: Chris PeBenito
Date: Mon, 26 Sep 2011 09:53:23 -0400
Subject: [PATCH] Move secure_mode_policyload into selinux module as that is
the only place it is used.
---
policy/global_booleans | 9 ---------
policy/modules/kernel/selinux.te | 9 +++++++++
2 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/policy/global_booleans b/policy/global_booleans
index 71ff1415b..66e85ea54 100644
--- a/policy/global_booleans
+++ b/policy/global_booleans
@@ -12,12 +12,3 @@
##
##
gen_bool(secure_mode,false)
-
-##
-##
-## boolean to determine whether the system permits loading policy, setting
-## enforcing mode, and changing boolean values. Set this to true and you
-## have to reboot to set it back
-##
-##
-gen_bool(secure_mode_policyload,false)
diff --git a/policy/modules/kernel/selinux.te b/policy/modules/kernel/selinux.te
index 4baa2b968..ebb68b7f3 100644
--- a/policy/modules/kernel/selinux.te
+++ b/policy/modules/kernel/selinux.te
@@ -5,6 +5,15 @@ policy_module(selinux, 1.10.0)
# Declarations
#
+##
+##
+## Boolean to determine whether the system permits loading policy, setting
+## enforcing mode, and changing boolean values. Set this to true and you
+## have to reboot to set it back.
+##
+##
+gen_bool(secure_mode_policyload,false)
+
attribute boolean_type;
attribute can_load_policy;
attribute can_setenforce;