Changeset 156

Show
Ignore:
Timestamp:
01/08/08 12:26:34 (11 months ago)
Author:
bwilliams
Message:

fixed bug with booleans

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branch/refpol-merged/src/selinux-policy-refpol/doc/global_tunables.xml

    r153 r156  
    128128</desc> 
    129129</tunable> 
     130<tunable name="spamd_enable_home_dirs" dftval="false"> 
     131<desc> 
     132<p> 
     133Allow applications to write untrusted content 
     134</p> 
     135</desc> 
     136</tunable> 
     137<tunable name="spamassassin_can_network" dftval="false"> 
     138<desc> 
     139<p> 
     140Allow applications to write untrusted content 
     141</p> 
     142</desc> 
     143</tunable> 
     144<tunable name="samba_enable_home_dirs" dftval="false"> 
     145<desc> 
     146<p> 
     147Allow applications to write untrusted content 
     148</p> 
     149</desc> 
     150</tunable> 
     151<tunable name="pppd_for_user" dftval="false"> 
     152<desc> 
     153<p> 
     154Allow applications to write untrusted content 
     155</p> 
     156</desc> 
     157</tunable> 
     158<tunable name="allow_kerberos" dftval="false"> 
     159<desc> 
     160<p> 
     161Allow applications to write untrusted content 
     162</p> 
     163</desc> 
     164</tunable> 

  • branch/refpol-merged/src/selinux-policy-refpol/doc/policy.xml

    r153 r156  
    11351135<rolecap/> 
    11361136</interface> 
    1137 <interface name="netutils_exec_ping" lineno="203"> 
     1137<interface name="netutils_exec_ping" lineno="202"> 
    11381138<summary> 
    11391139Execute ping in the caller domain. 
    …… 
    11451145</param> 
    11461146</interface> 
    1147 <interface name="netutils_domtrans_traceroute" lineno="221"> 
     1147<interface name="netutils_domtrans_traceroute" lineno="220"> 
    11481148<summary> 
    11491149Execute traceroute in the traceroute domain. 
    …… 
    11551155</param> 
    11561156</interface> 
    1157 <interface name="netutils_run_traceroute" lineno="251"> 
     1157<interface name="netutils_run_traceroute" lineno="250"> 
    11581158<summary> 
    11591159Execute traceroute in the traceroute domain, and 
    …… 
    11771177<rolecap/> 
    11781178</interface> 
    1179 <interface name="netutils_run_traceroute_cond" lineno="283"> 
     1179<interface name="netutils_run_traceroute_cond" lineno="282"> 
    11801180<summary> 
    11811181Conditionally execute traceroute in the traceroute domain, and 
    …… 
    11991199<rolecap/> 
    12001200</interface> 
    1201 <interface name="netutils_exec_traceroute" lineno="307"> 
     1201<interface name="netutils_exec_traceroute" lineno="305"> 
    12021202<summary> 
    12031203Execute traceroute in the caller domain. 
    …… 
    16781678</param> 
    16791679</template> 
    1680 <interface name="su_exec" lineno="317"> 
     1680<interface name="su_exec" lineno="316"> 
    16811681<summary> 
    16821682Execute su in the caller domain. 
    …… 
    4461344613<rolecap/> 
    4461444614</interface> 
    44615 <interface name="selinux_load_policy" lineno="219"> 
     44615<interface name="selinux_load_policy" lineno="218"> 
    4461644616<summary> 
    4461744617Allow caller to load the policy into the kernel. 
    …… 
    4462344623</param> 
    4462444624</interface> 
    44625 <interface name="selinux_set_boolean" lineno="262"> 
     44625<interface name="selinux_set_boolean" lineno="260"> 
    4462644626<summary> 
    4462744627Allow caller to set the state of Booleans to 
    …… 
    4464544645<rolecap/> 
    4464644646</interface> 
    44647 <interface name="selinux_set_parameters" lineno="303"> 
     44647<interface name="selinux_set_parameters" lineno="300"> 
    4464844648<summary> 
    4464944649Allow caller to set SELinux access vector cache parameters. 
    …… 
    4466744667<rolecap/> 
    4466844668</interface> 
    44669 <interface name="selinux_validate_context" lineno="327"> 
     44669<interface name="selinux_validate_context" lineno="324"> 
    4467044670<summary> 
    4467144671Allows caller to validate security contexts. 
    …… 
    4467844678<rolecap/> 
    4467944679</interface> 
    44680 <interface name="selinux_compute_access_vector" lineno="348"> 
     44680<interface name="selinux_compute_access_vector" lineno="345"> 
    4468144681<summary> 
    4468244682Allows caller to compute an access vector. 
    …… 
    4468944689<rolecap/> 
    4469044690</interface> 
    44691 <interface name="selinux_compute_create_context" lineno="369"> 
     44691<interface name="selinux_compute_create_context" lineno="366"> 
    4469244692<summary> 
    4469344693Calculate the default type for object creation. 
    …… 
    4470044700<rolecap/> 
    4470144701</interface> 
    44702 <interface name="selinux_compute_member" lineno="390"> 
     44702<interface name="selinux_compute_member" lineno="387"> 
    4470344703<summary> 
    4470444704Allows caller to compute polyinstatntiated 
    …… 
    4471144711</param> 
    4471244712</interface> 
    44713 <interface name="selinux_compute_relabel_context" lineno="419"> 
     44713<interface name="selinux_compute_relabel_context" lineno="416"> 
    4471444714<summary> 
    4471544715Calculate the context for relabeling objects. 
    …… 
    4473044730</param> 
    4473144731</interface> 
    44732 <interface name="selinux_compute_user_contexts" lineno="439"> 
     44732<interface name="selinux_compute_user_contexts" lineno="436"> 
    4473344733<summary> 
    4473444734Allows caller to compute possible contexts for a user. 
    …… 
    4474044740</param> 
    4474144741</interface> 
    44742 <interface name="selinux_unconfined" lineno="459"> 
     44742<interface name="selinux_unconfined" lineno="456"> 
    4474344743<summary> 
    4474444744Unconfined access to the SELinux kernel security server. 
    …… 
    5324253242</param> 
    5324353243</template> 
    53244 <template name="xserver_ro_session_template" lineno="457"> 
     53244<template name="xserver_ro_session_template" lineno="469"> 
    5324553245<summary> 
    5324653246Template for creating sessions on a 
    …… 
    5326653266</param> 
    5326753267</template> 
    53268 <template name="xserver_rw_session_template" lineno="504"> 
     53268<template name="xserver_rw_session_template" lineno="516"> 
    5326953269<summary> 
    5327053270Template for creating sessions on a 
    …… 
    5329053290</param> 
    5329153291</template> 
    53292 <template name="xserver_user_client_template" lineno="536"> 
     53292<template name="xserver_user_client_template" lineno="548"> 
    5329353293<summary> 
    5329453294Template for creating full client sessions 
    …… 
    5331253312</param> 
    5331353313</template> 
    53314 <template name="xserver_use_user_fonts" lineno="607"> 
     53314<template name="xserver_use_user_fonts" lineno="619"> 
    5331553315<summary> 
    5331653316Read user fonts, user font configuration, 
    …… 
    5333953339</param> 
    5334053340</template> 
    53341 <template name="xserver_domtrans_user_xauth" lineno="652"> 
     53341<template name="xserver_domtrans_user_xauth" lineno="664"> 
    5334253342<summary> 
    5334353343Transition to a user Xauthority domain. 
    …… 
    5336453364</param> 
    5336553365</template> 
    53366 <template name="xserver_user_home_dir_filetrans_user_xauth" lineno="685"> 
     53366<template name="xserver_user_home_dir_filetrans_user_xauth" lineno="697"> 
    5336753367<summary> 
    5336853368Transition to a user Xauthority domain. 
    …… 
    5338953389</param> 
    5339053390</template> 
    53391 <interface name="xserver_use_all_users_fonts" lineno="704"> 
     53391<interface name="xserver_use_all_users_fonts" lineno="716"> 
    5339253392<summary> 
    5339353393Read all users fonts, user font configurations, 
    …… 
    5340053400</param> 
    5340153401</interface> 
    53402 <interface name="xserver_read_all_users_xauth" lineno="734"> 
     53402<interface name="xserver_read_all_users_xauth" lineno="746"> 
    5340353403<summary> 
    5340453404Read all users .Xauthority. 
    …… 
    5341053410</param> 
    5341153411</interface> 
    53412 <interface name="xserver_setattr_console_pipes" lineno="753"> 
     53412<interface name="xserver_setattr_console_pipes" lineno="765"> 
    5341353413<summary> 
    5341453414Set the attributes of the X windows console named pipes. 
    …… 
    5342053420</param> 
    5342153421</interface> 
    53422 <interface name="xserver_rw_console" lineno="771"> 
     53422<interface name="xserver_rw_console" lineno="783"> 
    5342353423<summary> 
    5342453424Read and write the X windows console named pipe. 
    …… 
    5343053430</param> 
    5343153431</interface> 
    53432 <interface name="xserver_use_xdm_fds" lineno="789"> 
     53432<interface name="xserver_use_xdm_fds" lineno="801"> 
    5343353433<summary> 
    5343453434Use file descriptors for xdm. 
    …… 
    5344053440</param> 
    5344153441</interface> 
    53442 <interface name="xserver_dontaudit_use_xdm_fds" lineno="808"> 
     53442<interface name="xserver_dontaudit_use_xdm_fds" lineno="820"> 
    5344353443<summary> 
    5344453444Do not audit attempts to inherit 
    …… 
    5345153451</param> 
    5345253452</interface> 
    53453 <interface name="xserver_rw_xdm_pipes" lineno="826"> 
     53453<interface name="xserver_rw_xdm_pipes" lineno="838"> 
    5345453454<summary> 
    5345553455Read and write XDM unnamed pipes. 
    …… 
    5346153461</param> 
    5346253462</interface> 
    53463 <interface name="xserver_dontaudit_rw_xdm_pipes" lineno="845"> 
     53463<interface name="xserver_dontaudit_rw_xdm_pipes" lineno="857"> 
    5346453464<summary> 
    5346553465Do not audit attempts to read and write 
    …… 
    5347253472</param> 
    5347353473</interface> 
    53474 <interface name="xserver_stream_connect_xdm" lineno="865"> 
     53474<interface name="xserver_stream_connect_xdm" lineno="877"> 
    5347553475<summary> 
    5347653476Connect to XDM over a unix domain 
    …… 
    5348353483</param> 
    5348453484</interface> 
    53485 <interface name="xserver_read_xdm_rw_config" lineno="884"> 
     53485<interface name="xserver_read_xdm_rw_config" lineno="896"> 
    5348653486<summary> 
    5348753487Read xdm-writable configuration files. 
    …… 
    5349353493</param> 
    5349453494</interface> 
    53495 <interface name="xserver_setattr_xdm_tmp_dirs" lineno="903"> 
     53495<interface name="xserver_setattr_xdm_tmp_dirs" lineno="915"> 
    5349653496<summary> 
    5349753497Set the attributes of XDM temporary directories. 
    …… 
    5350353503</param> 
    5350453504</interface> 
    53505 <interface name="xserver_create_xdm_tmp_sockets" lineno="922"> 
     53505<interface name="xserver_create_xdm_tmp_sockets" lineno="934"> 
    5350653506<summary> 
    5350753507Create a named socket in a XDM 
    …… 
    5351453514</param> 
    5351553515</interface> 
    53516 <interface name="xserver_read_xdm_pid" lineno="942"> 
     53516<interface name="xserver_read_xdm_pid" lineno="954"> 
    5351753517<summary> 
    5351853518Read XDM pid files. 
    …… 
    5352453524</param> 
    5352553525</interface> 
    53526 <interface name="xserver_read_xdm_lib_files" lineno="961"> 
     53526<interface name="xserver_read_xdm_lib_files" lineno="973"> 
    5352753527<summary> 
    5352853528Read XDM var lib files. 
    …… 
    5353453534</param> 
    5353553535</interface> 
    53536 <interface name="xserver_domtrans_xdm_xserver" lineno="979"> 
     53536<interface name="xserver_domtrans_xdm_xserver" lineno="991"> 
    5353753537<summary> 
    5353853538Execute the X server in the XDM X server domain. 
    …… 
    5354453544</param> 
    5354553545</interface> 
    53546 <interface name="xserver_xsession_entry_type" lineno="998"> 
     53546<interface name="xserver_xsession_entry_type" lineno="1010"> 
    5354753547<summary> 
    5354853548Make an X session script an entrypoint for the specified domain. 
    …… 
    5355453554</param> 
    5355553555</interface> 
    53556 <interface name="xserver_xsession_spec_domtrans" lineno="1035"> 
     53556<interface name="xserver_xsession_spec_domtrans" lineno="1047"> 
    5355753557<summary> 
    5355853558Execute an X session in the target domain.  This 
    …… 
    5358353583</param> 
    5358453584</interface> 
    53585 <interface name="xserver_getattr_log" lineno="1053"> 
     53585<interface name="xserver_getattr_log" lineno="1065"> 
    5358653586<summary> 
    5358753587Get the attributes of X server logs. 
    …… 
    5359353593</param> 
    5359453594</interface> 
    53595 <interface name="xserver_dontaudit_write_log" lineno="1073"> 
     53595<interface name="xserver_dontaudit_write_log" lineno="1085"> 
    5359653596<summary> 
    5359753597Do not audit attempts to write the X server 
    …… 
    5360453604</param> 
    5360553605</interface> 
    53606 <interface name="xserver_delete_log" lineno="1092"> 
     53606<interface name="xserver_delete_log" lineno="1104"> 
    5360753607<summary> 
    5360853608Do not audit attempts to write the X server 
    …… 
    5361553615</param> 
    5361653616</interface> 
    53617 <interface name="xserver_read_xkb_libs" lineno="1113"> 
     53617<interface name="xserver_read_xkb_libs" lineno="1125"> 
    5361853618<summary> 
    5361953619Read X keyboard extension libraries. 
    …… 
    5362553625</param> 
    5362653626</interface> 
    53627 <interface name="xserver_read_xdm_xserver_tmp_files" lineno="1134"> 
     53627<interface name="xserver_read_xdm_xserver_tmp_files" lineno="1146"> 
    5362853628<summary> 
    5362953629Read xdm temporary files. 
    …… 
    5363553635</param> 
    5363653636</interface> 
    53637 <interface name="xserver_read_xdm_tmp_files" lineno="1152"> 
     53637<interface name="xserver_read_xdm_tmp_files" lineno="1164"> 
    5363853638<summary> 
    5363953639Read xdm temporary files. 
    …… 
    5364553645</param> 
    5364653646</interface> 
    53647 <interface name="xserver_dontaudit_read_xdm_tmp_files" lineno="1171"> 
     53647<interface name="xserver_dontaudit_read_xdm_tmp_files" lineno="1183"> 
    5364853648<summary> 
    5364953649Do not audit attempts to read xdm temporary files. 
    …… 
    5365553655</param> 
    5365653656</interface> 
    53657 <interface name="xserver_rw_xdm_tmp_files" lineno="1190"> 
     53657<interface name="xserver_rw_xdm_tmp_files" lineno="1202"> 
    5365853658<summary> 
    5365953659Read write xdm temporary files. 
    …… 
    5366553665</param> 
    5366653666</interface> 
    53667 <interface name="xserver_manage_xdm_tmp_files" lineno="1209"> 
     53667<interface name="xserver_manage_xdm_tmp_files" lineno="1221"> 
    5366853668<summary> 
    5366953669Create, read, write, and delete xdm temporary files. 
    …… 
    5367553675</param> 
    5367653676</interface> 
    53677 <interface name="xserver_dontaudit_getattr_xdm_tmp_sockets" lineno="1227"> 
     53677<interface name="xserver_dontaudit_getattr_xdm_tmp_sockets" lineno="1239"> 
    5367853678<summary> 
    5367953679dontaudit getattr xdm temporary named sockets. 
    …… 
    5368553685</param> 
    5368653686</interface> 
    53687 <interface name="xserver_signal_xdm_xserver" lineno="1245"> 
     53687<interface name="xserver_signal_xdm_xserver" lineno="1257"> 
    5368853688<summary> 
    5368953689Signal XDM X servers 
    …… 
    5369553695</param> 
    5369653696</interface> 
    53697 <interface name="xserver_kill_xdm_xserver" lineno="1263"> 
     53697<interface name="xserver_kill_xdm_xserver" lineno="1275"> 
    5369853698<summary> 
    5369953699Kill XDM X servers 
    …… 
    5370553705</param> 
    5370653706</interface> 
    53707 <interface name="xserver_dontaudit_rw_xdm_xserver_tcp_sockets" lineno="1282"> 
     53707<interface name="xserver_dontaudit_rw_xdm_xserver_tcp_sockets" lineno="1294"> 
    5370853708<summary> 
    5370953709Do not audit attempts to read and write to 
    …… 
    5371653716</param> 
    5371753717</interface> 
    53718 <interface name="xserver_dontaudit_rw_xdm_stream_sockets" lineno="1301"> 
     53718<interface name="xserver_dontaudit_rw_xdm_stream_sockets" lineno="1313"> 
    5371953719<summary> 
    5372053720Do not audit attempts to read and write xdm_xserver 
    …… 
    5372753727</param> 
    5372853728</interface> 
    53729 <interface name="xserver_stream_connect_xdm_xserver" lineno="1320"> 
     53729<interface name="xserver_stream_connect_xdm_xserver" lineno="1332"> 
    5373053730<summary> 
    5373153731Connect to xdm_xserver over a unix domain 
    …… 
    5712857128</param> 
    5712957129</interface> 
    57130 <interface name="modutils_run_insmod" lineno="132"> 
     57130<interface name="modutils_run_insmod" lineno="128"> 
    5713157131<summary> 
    5713257132Execute insmod in the insmod domain, and 
    …… 
    5715257152<rolecap/> 
    5715357153</interface> 
    57154 <interface name="modutils_exec_insmod" lineno="152"> 
     57154<interface name="modutils_exec_insmod" lineno="148"> 
    5715557155<summary> 
    5715657156Execute insmod in the caller domain. 
    …… 
    5716257162</param> 
    5716357163</interface> 
    57164 <interface name="modutils_domtrans_depmod" lineno="171"> 
     57164<interface name="modutils_domtrans_depmod" lineno="167"> 
    5716557165<summary> 
    5716657166Execute depmod in the depmod domain. 
    …… 
    5717257172</param> 
    5717357173</interface> 
    57174 <interface name="modutils_run_depmod" lineno="201"> 
     57174<interface name="modutils_run_depmod" lineno="197"> 
    5717557175<summary> 
    5717657176Execute depmod in the depmod domain. 
    …… 
    5719357193<rolecap/> 
    5719457194</interface> 
    57195 <interface name="modutils_exec_depmod" lineno="221"> 
     57195<interface name="modutils_exec_depmod" lineno="217"> 
    5719657196<summary> 
    5719757197Execute depmod in the caller domain. 
    …… 
    5720357203</param> 
    5720457204</interface> 
    57205 <interface name="modutils_domtrans_update_mods" lineno="240"> 
     57205<interface name="modutils_domtrans_update_mods" lineno="236"> 
    5720657206<summary> 
    5720757207Execute depmod in the depmod domain. 
    …… 
    5721357213</param> 
    5721457214</interface> 
    57215 <interface name="modutils_run_update_mods" lineno="270"> 
     57215<interface name="modutils_run_update_mods" lineno="266"> 
    5721657216<summary> 
    5721757217Execute update_modules in the update_modules domain. 
    …… 
    5723457234<rolecap/> 
    5723557235</interface> 
    57236 <interface name="modutils_exec_update_mods" lineno="290"> 
     57236<interface name="modutils_exec_update_mods" lineno="286"> 
    5723757237<summary> 
    5723857238Execute update_modules in the caller domain. 
    …… 
    6237762377</desc> 
    6237862378</tunable> 
     62379<tunable name="spamd_enable_home_dirs" dftval="false"> 
     62380<desc> 
     62381<p> 
     62382Allow applications to write untrusted content 
     62383</p> 
     62384</desc> 
     62385</tunable> 
     62386<tunable name="spamassassin_can_network" dftval="false"> 
     62387<desc> 
     62388<p> 
     62389Allow applications to write untrusted content 
     62390</p> 
     62391</desc> 
     62392</tunable> 
     62393<tunable name="samba_enable_home_dirs" dftval="false"> 
     62394<desc> 
     62395<p> 
     62396Allow applications to write untrusted content 
     62397</p> 
     62398</desc> 
     62399</tunable> 
     62400<tunable name="pppd_for_user" dftval="false"> 
     62401<desc> 
     62402<p> 
     62403Allow applications to write untrusted content 
     62404</p> 
     62405</desc> 
     62406</tunable> 
     62407<tunable name="allow_kerberos" dftval="false"> 
     62408<desc> 
     62409<p> 
     62410Allow applications to write untrusted content 
     62411</p> 
     62412</desc> 
     62413</tunable> 
    6237962414<bool name="secure_mode" dftval="false"> 
    6238062415<desc> 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/booleans.conf

    r153 r156  
    435435write_untrusted_content = false 
    436436 
     437# 
     438# Allow applications to write untrusted content 
     439#  
     440spamd_enable_home_dirs = true 
     441 
     442# 
     443# Allow applications to write untrusted content 
     444#  
     445spamassassin_can_network = false 
     446 
     447# 
     448# Allow applications to write untrusted content 
     449#  
     450samba_enable_home_dirs = false 
     451 
     452# 
     453# Allow applications to write untrusted content 
     454#  
     455pppd_for_user = false 
     456 
     457# 
     458# Allow applications to write untrusted content 
     459#  
     460allow_kerberos = false 
     461 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/global_tunables

    r153 r156  
    133133## </desc> 
    134134gen_tunable(write_untrusted_content,false) 
     135 
     136## <desc> 
     137## <p> 
     138## Allow applications to write untrusted content 
     139## </p> 
     140## </desc> 
     141gen_tunable(spamd_enable_home_dirs, false) 
     142 
     143## <desc> 
     144## <p> 
     145## Allow applications to write untrusted content 
     146## </p> 
     147## </desc> 
     148gen_tunable(spamassassin_can_network, false) 
     149 
     150## <desc> 
     151## <p> 
     152## Allow applications to write untrusted content 
     153## </p> 
     154## </desc> 
     155gen_tunable(samba_enable_home_dirs, false) 
     156 
     157## <desc> 
     158## <p> 
     159## Allow applications to write untrusted content 
     160## </p> 
     161## </desc> 
     162gen_tunable(pppd_for_user, false) 
     163 
     164## <desc> 
     165## <p> 
     166## Allow applications to write untrusted content 
     167## </p> 
     168## </desc> 
     169gen_tunable(allow_kerberos, false) 
     170 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/admin/netutils.if

    r153 r156  
    180180        gen_require(` 
    181181                type ping_t; 
    182                 bool user_ping; 
    183182        ') 
    184183 
    …… 
    284283        gen_require(` 
    285284                type traceroute_t; 
    286                 bool user_ping; 
    287285        ') 
    288286 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/admin/su.if

    r153 r156  
    164164                attribute su_domain_type; 
    165165                type su_exec_t; 
    166                 bool secure_mode; 
    167166        ') 
    168167 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/kernel/selinux.if

    r153 r156  
    190190                type security_t; 
    191191                attribute can_setenforce; 
    192                 bool secure_mode_policyload; 
    193192        ') 
    194193 
    …… 
    221220                type security_t; 
    222221                attribute can_load_policy; 
    223                 bool secure_mode_policyload; 
    224222        ') 
    225223 
    …… 
    263261        gen_require(` 
    264262                type security_t; 
    265                 bool secure_mode_policyload; 
    266263        ') 
    267264 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/system/modutils.if

    r153 r156  
    9797# 
    9898interface(`modutils_domtrans_insmod',` 
    99         gen_require(` 
    100                 bool secure_mode_insmod; 
    101         ') 
    102  
    10399        if (!secure_mode_insmod) { 
    104100                modutils_domtrans_insmod_uncond($1) 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/system/modutils.te

    r153 r156  
    11 
    22policy_module(modutils,1.5.1) 
    3  
    4 gen_require(` 
    5         bool secure_mode_insmod; 
    6 ') 
    73 
    84######################################## 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/system/selinuxutil.te

    r153 r156  
    11 
    22policy_module(selinuxutil,1.7.1) 
    3  
    4 gen_require(` 
    5         bool secure_mode; 
    6 ') 
    73 
    84######################################## 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/support/loadable_module.spt

    r153 r156  
    130130 
    131131define(`declare_required_symbols',` 
    132 ifelse(regexp($1, `\w'), -1, `', `dnl 
     132 ifelse(regexp($1, `\w'), -1, `', `dnl 
    133133bool regexp($1, `\(\w+\)', `\1'); 
    134 declare_required_symbols(regexp($1, `\w+\(.*\)', `\1'))dnl 
    135 ') dnl 
     134 declare_required_symbols(regexp($1, `\w+\(.*\)', `\1'))dnl 
     135 ') dnl 
    136136') 
    137137