Changeset 2784

Timestamp:

08/18/08 10:14:42 (4 months ago)

Author:

cpebenito

Message:

rbacsep: add missing auth_role().

Files:

• branches/rbacsep/policy/modules/roles/auditadm.te (modified) (1 diff)
• branches/rbacsep/policy/modules/roles/secadm.te (modified) (1 diff)
• branches/rbacsep/policy/modules/roles/staff.te (modified) (1 diff)
• branches/rbacsep/policy/modules/roles/sysadm.te (modified) (1 diff)
• branches/rbacsep/policy/modules/roles/unprivuser.te (modified) (1 diff)

branches/rbacsep/policy/modules/roles/auditadm.te

@@ -34 +34 @@
-optional_policy(`
-        apache_role(auditadm_r, auditadm_t)
+')
+
+optional_policy(`
+        auth_role(auditadm_r, auditadm_t)
-')
-

branches/rbacsep/policy/modules/roles/secadm.te

@@ -31 +31 @@
-mls_file_downgrade(secadm_t)
-
+auth_role(secadm_r, secadm_t)
-auth_relabel_all_files_except_shadow(secadm_t)
-auth_relabel_shadow(secadm_t)

branches/rbacsep/policy/modules/roles/staff.te

@@ -18 +18 @@
-optional_policy(`
-        apache_role(staff_r, staff_t)
+')
+
+optional_policy(`
+        auth_role(staff_r, staff_t)
-')
-

branches/rbacsep/policy/modules/roles/sysadm.te

@@ -84 +84 @@
-
-optional_policy(`
+        auth_role(sysadm_r, sysadm_t)
+')
+
+optional_policy(`
-        backup_run(sysadm_t, sysadm_r, { sysadm_tty_device_t sysadm_devpts_t })
-')

branches/rbacsep/policy/modules/roles/unprivuser.te

@@ -16 +16 @@
-optional_policy(`
-        apache_role(user_r, user_t)
+')
+
+optional_policy(`
+        auth_role(user_r, user_t)
-')
-