nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

remove redundant userdom_manage_generic_user_home_dir interface

This commit is contained in:
Chris PeBenito 2006-02-03 16:31:53 +00:00
parent 017bab0575
commit cd07eaecf0
3 changed files with 3 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
refpolicy/policy/modules/admin/firstboot.te
View File

@ -99,14 +99,13 @@ modutils_read_module_config(firstboot_t)
modutils_read_module_deps(firstboot_t)
# Add/remove user home directories
userdom_filetrans_generic_user_home_dir(firstboot_t)
userdom_manage_generic_user_home_dir(firstboot_t)
userdom_filetrans_generic_user_home(firstboot_t,{ dir file lnk_file fifo_file sock_file })
userdom_manage_generic_user_home_dirs(firstboot_t)
userdom_manage_generic_user_home_files(firstboot_t)
userdom_manage_generic_user_home_symlinks(firstboot_t)
userdom_manage_generic_user_home_pipes(firstboot_t)
userdom_manage_generic_user_home_sockets(firstboot_t)
userdom_filetrans_generic_user_home_dir(firstboot_t)
userdom_filetrans_generic_user_home(firstboot_t,{ dir file lnk_file fifo_file sock_file })
ifdef(`targeted_policy',`
unconfined_domtrans(firstboot_t)

2
refpolicy/policy/modules/admin/usermanage.te
View File

@ -503,7 +503,7 @@ userdom_use_unpriv_users_fd(useradd_t)
userdom_dontaudit_search_sysadm_home_dir(useradd_t)
# Add/remove user home directories
userdom_filetrans_generic_user_home_dir(useradd_t)
userdom_manage_generic_user_home_dir(useradd_t)
userdom_manage_generic_user_home_dirs(useradd_t)
userdom_filetrans_generic_user_home(useradd_t,notdevfile_class_set)
mta_manage_spool(useradd_t)

17
refpolicy/policy/modules/system/userdomain.if
View File

@ -3452,23 +3452,6 @@ interface(`userdom_search_generic_user_home_dir',`
allow $1 user_home_dir_t:dir search_dir_perms;
')
########################################
## <summary>
## Create, read, write, and delete
## generic user home directories.
## </summary>
## <param name="domain">
## Domain allowed access.
## </param>
#
interface(`userdom_manage_generic_user_home_dir',`
gen_require(`
type user_home_dir_t;
')
allow $1 user_home_dir_t:dir create_dir_perms;
')
########################################
## <summary>
## Create objects in generic user home directories