[refpolicy] [ patch 1/1] su: redundant, init_dontaudit_use_script_ptys($1_su_t)

Christopher J. PeBenito cpebenito at tresys.com
Mon Oct 11 08:37:26 CDT 2010


On 10/08/10 09:57, Dominick Grift wrote:
> Signed-off-by: Dominick Grift<domg472 at gmail.com>
> ---
> :100644 100644 a0aa8c5... 28a4e3d... M	policy/modules/admin/su.if
>   policy/modules/admin/su.if |    5 -----
>   1 files changed, 0 insertions(+), 5 deletions(-)
>
> diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if
> index a0aa8c5..28a4e3d 100644
> --- a/policy/modules/admin/su.if
> +++ b/policy/modules/admin/su.if
> @@ -135,11 +135,6 @@ template(`su_restricted_domain_template', `
>   		# used when the password has expired
>   		usermanage_read_crack_db($1_su_t)
>   	')
> -
> -	ifdef(`TODO',`
> -	# Caused by su - init scripts
> -	dontaudit $1_su_t initrc_devpts_t:chr_file { getattr ioctl };
> -	') dnl end TODO
>   ')
>
>   #######################################

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com


More information about the refpolicy mailing list