From e64b338b3513c07f9ed53a95bdbc6089c8aa048a Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Mon, 24 Oct 2005 15:29:27 +0000 Subject: [PATCH] fix --- refpolicy/policy/modules/admin/kudzu.te | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/refpolicy/policy/modules/admin/kudzu.te b/refpolicy/policy/modules/admin/kudzu.te index 4e99ea141..31691cd49 100644 --- a/refpolicy/policy/modules/admin/kudzu.te +++ b/refpolicy/policy/modules/admin/kudzu.te @@ -121,6 +121,13 @@ ifdef(`targeted_policy',` term_dontaudit_use_unallocated_tty(kudzu_t) term_dontaudit_use_generic_pty(kudzu_t) files_dontaudit_read_root_file(kudzu_t) + + # cjp: this was originally in the else block + # of ifdef userhelper.te, but it seems to + # make more sense here. also, require + # blocks curently do not work in the + # else block of optionals + unconfined_domain_template(kudzu_t) ') tunable_policy(`allow_execmem',`