[refpolicy] [ rpc patch 1/1] Move kernel_request_load_module(gssd_t) to the proper place.

Dominick Grift domg472 at gmail.com
Tue Apr 6 08:24:23 CDT 2010


Signed-off-by: Dominick Grift <domg472 at gmail.com>
---
:100644 100644 33d34dd... 797d628... M	policy/modules/services/rpc.te
 policy/modules/services/rpc.te |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/policy/modules/services/rpc.te b/policy/modules/services/rpc.te
index 33d34dd..797d628 100644
--- a/policy/modules/services/rpc.te
+++ b/policy/modules/services/rpc.te
@@ -74,7 +74,6 @@ kernel_read_system_state(rpcd_t)
 kernel_read_network_state(rpcd_t)
 # for rpc.rquotad
 kernel_read_sysctl(rpcd_t)
-kernel_request_load_module(gssd_t)
 kernel_rw_fs_sysctls(rpcd_t)
 kernel_dontaudit_getattr_core_if(rpcd_t)
 kernel_signal(rpcd_t)
@@ -192,6 +191,7 @@ files_tmp_filetrans(gssd_t, gssd_tmp_t, { file dir })
 kernel_read_system_state(gssd_t)
 kernel_read_network_state(gssd_t)
 kernel_read_network_state_symlinks(gssd_t)
+kernel_request_load_module(gssd_t)
 kernel_search_network_sysctl(gssd_t)
 kernel_signal(gssd_t)
 
-- 
1.7.0.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100406/6ae070c5/attachment.bin 


More information about the refpolicy mailing list