2010-08-05 12:45:31

by domg472

[permalink] [raw]
Subject: [refpolicy] [ admin layer patch 1/1] Admin layer xml fixes.

Signed-off-by: Dominick Grift <[email protected]>
---
:100644 100644 d73c515... e66c296... M policy/modules/admin/acct.if
:100644 100644 b4c78c7... fe09bea... M policy/modules/admin/alsa.if
:100644 100644 90bef9e... d1d035e... M policy/modules/admin/amanda.if
:100644 100644 722175d... 52ea86f... M policy/modules/admin/amtu.if
:100644 100644 84668f1... e696b80... M policy/modules/admin/apt.if
:100644 100644 cb1bdb3... 1017b7a... M policy/modules/admin/backup.if
:100644 100644 25ffe4d... ebe8570... M policy/modules/admin/bootloader.if
:100644 100644 563cae9... 953451a... M policy/modules/admin/certwatch.if
:100644 100644 2f75a75... 0f57d3b... M policy/modules/admin/consoletype.if
:100644 100644 1a43194... 9868652... M policy/modules/admin/ddcprobe.if
:100644 100644 4035397... e1973c7... M policy/modules/admin/dmesg.if
:100644 100644 d9f6ff2... 4bf435c... M policy/modules/admin/dmidecode.if
:100644 100644 633495b... 9317171... M policy/modules/admin/dpkg.if
:100644 100644 b65ebdb... 8fa451c... M policy/modules/admin/firstboot.if
:100644 100644 52f2545... c18c920... M policy/modules/admin/kismet.if
:100644 100644 585cd64... 65bcaff... M policy/modules/admin/kudzu.if
:100644 100644 fa1c236... 6672183... M policy/modules/admin/logrotate.if
:100644 100644 0bd526e... a005782... M policy/modules/admin/netutils.if
:100644 100644 35161b2... 8aaa46d... M policy/modules/admin/portage.if
:100644 100644 89e8209... 93ec175... M policy/modules/admin/prelink.if
:100644 100644 fd8568e... 6382d3c... M policy/modules/admin/quota.if
:100644 100644 2514ed5... 86463e3... M policy/modules/admin/rpm.if
:100644 100644 d26bad6... d2c068d... M policy/modules/admin/shutdown.if
:100644 100644 f623209... 27abd88... M policy/modules/admin/tripwire.if
:100644 100644 b873388... 7747b16... M policy/modules/admin/tzdata.if
:100644 100644 6a4f564... 4d4b60e... M policy/modules/admin/updfstab.if
:100644 100644 eba81e2... b7eade3... M policy/modules/admin/usbmodules.if
:100644 100644 dd6ab1b... b56c212... M policy/modules/admin/usermanage.if
:100644 100644 273d01d... f46ab17... M policy/modules/admin/vbetool.if
:100644 100644 7ed042a... 64f8cdc... M policy/modules/admin/vpn.if
policy/modules/admin/acct.if | 2 +-
policy/modules/admin/alsa.if | 2 +-
policy/modules/admin/amanda.if | 8 ++++----
policy/modules/admin/amtu.if | 4 ++--
policy/modules/admin/apt.if | 7 +++----
policy/modules/admin/backup.if | 4 ++--
policy/modules/admin/bootloader.if | 4 ++--
policy/modules/admin/certwatch.if | 6 +++---
policy/modules/admin/consoletype.if | 4 ++--
policy/modules/admin/ddcprobe.if | 4 ++--
policy/modules/admin/dmesg.if | 2 +-
policy/modules/admin/dmidecode.if | 4 ++--
policy/modules/admin/dpkg.if | 6 +++---
policy/modules/admin/firstboot.if | 4 ++--
policy/modules/admin/kismet.if | 6 +++---
policy/modules/admin/kudzu.if | 4 ++--
policy/modules/admin/logrotate.if | 4 ++--
policy/modules/admin/netutils.if | 16 ++++++++--------
policy/modules/admin/portage.if | 12 ++++++------
policy/modules/admin/prelink.if | 4 ++--
policy/modules/admin/quota.if | 6 +++---
policy/modules/admin/rpm.if | 10 +++++-----
policy/modules/admin/shutdown.if | 2 +-
policy/modules/admin/tripwire.if | 16 ++++++++--------
policy/modules/admin/tzdata.if | 2 +-
policy/modules/admin/updfstab.if | 2 +-
policy/modules/admin/usbmodules.if | 4 ++--
policy/modules/admin/usermanage.if | 22 +++++++++++-----------
policy/modules/admin/vbetool.if | 4 ++--
policy/modules/admin/vpn.if | 4 ++--
30 files changed, 89 insertions(+), 90 deletions(-)

diff --git a/policy/modules/admin/acct.if b/policy/modules/admin/acct.if
index d73c515..e66c296 100644
--- a/policy/modules/admin/acct.if
+++ b/policy/modules/admin/acct.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if
index b4c78c7..fe09bea 100644
--- a/policy/modules/admin/alsa.if
+++ b/policy/modules/admin/alsa.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/amanda.if b/policy/modules/admin/amanda.if
index 90bef9e..d1d035e 100644
--- a/policy/modules/admin/amanda.if
+++ b/policy/modules/admin/amanda.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`amanda_domtrans_recover',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -87,7 +87,7 @@ interface(`amanda_dontaudit_read_dumpdates',`
## </summary>
## <param name="domain">
## <summary>
-## Domain to allow
+## Domain allowed access.
## </summary>
## </param>
#
@@ -124,7 +124,7 @@ interface(`amanda_manage_lib',`
## </summary>
## <param name="domain">
## <summary>
-## Domain to allow
+## Domain allowed access.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/amtu.if b/policy/modules/admin/amtu.if
index 722175d..52ea86f 100644
--- a/policy/modules/admin/amtu.if
+++ b/policy/modules/admin/amtu.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -26,7 +26,7 @@ interface(`amtu_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/apt.if b/policy/modules/admin/apt.if
index 84668f1..e696b80 100644
--- a/policy/modules/admin/apt.if
+++ b/policy/modules/admin/apt.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -26,7 +26,7 @@ interface(`apt_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -71,8 +71,7 @@ interface(`apt_use_fds',`
## </summary>
## <param name="domain">
## <summary>
-## The type of the process attempting performing this action
-## which should not be audited.
+## Domain to not audit.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/backup.if b/policy/modules/admin/backup.if
index cb1bdb3..1017b7a 100644
--- a/policy/modules/admin/backup.if
+++ b/policy/modules/admin/backup.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`backup_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if
index 25ffe4d..ebe8570 100644
--- a/policy/modules/admin/bootloader.if
+++ b/policy/modules/admin/bootloader.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`bootloader_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/certwatch.if b/policy/modules/admin/certwatch.if
index 563cae9..953451a 100644
--- a/policy/modules/admin/certwatch.if
+++ b/policy/modules/admin/certwatch.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -29,7 +29,7 @@ interface(`certwatch_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -57,7 +57,7 @@ interface(`certwatch_run',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/consoletype.if b/policy/modules/admin/consoletype.if
index 2f75a75..0f57d3b 100644
--- a/policy/modules/admin/consoletype.if
+++ b/policy/modules/admin/consoletype.if
@@ -8,7 +8,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -32,7 +32,7 @@ interface(`consoletype_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/ddcprobe.if b/policy/modules/admin/ddcprobe.if
index 1a43194..9868652 100644
--- a/policy/modules/admin/ddcprobe.if
+++ b/policy/modules/admin/ddcprobe.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`ddcprobe_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/dmesg.if b/policy/modules/admin/dmesg.if
index 4035397..e1973c7 100644
--- a/policy/modules/admin/dmesg.if
+++ b/policy/modules/admin/dmesg.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/dmidecode.if b/policy/modules/admin/dmidecode.if
index d9f6ff2..4bf435c 100644
--- a/policy/modules/admin/dmidecode.if
+++ b/policy/modules/admin/dmidecode.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -30,7 +30,7 @@ interface(`dmidecode_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/dpkg.if b/policy/modules/admin/dpkg.if
index 633495b..9317171 100644
--- a/policy/modules/admin/dpkg.if
+++ b/policy/modules/admin/dpkg.if
@@ -8,7 +8,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -28,7 +28,7 @@ interface(`dpkg_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -50,7 +50,7 @@ interface(`dpkg_domtrans_script',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/firstboot.if b/policy/modules/admin/firstboot.if
index b65ebdb..8fa451c 100644
--- a/policy/modules/admin/firstboot.if
+++ b/policy/modules/admin/firstboot.if
@@ -9,7 +9,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -28,7 +28,7 @@ interface(`firstboot_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/kismet.if b/policy/modules/admin/kismet.if
index 52f2545..c18c920 100644
--- a/policy/modules/admin/kismet.if
+++ b/policy/modules/admin/kismet.if
@@ -26,7 +26,7 @@ interface(`kismet_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -188,7 +188,7 @@ interface(`kismet_read_log',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed to transition.
+## Domain allowed access.
## </summary>
## </param>
#
@@ -207,7 +207,7 @@ interface(`kismet_append_log',`
## </summary>
## <param name="domain">
## <summary>
-## Domain to not audit.
+## Domain allowed access.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/kudzu.if b/policy/modules/admin/kudzu.if
index 585cd64..65bcaff 100644
--- a/policy/modules/admin/kudzu.if
+++ b/policy/modules/admin/kudzu.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`kudzu_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/logrotate.if b/policy/modules/admin/logrotate.if
index fa1c236..6672183 100644
--- a/policy/modules/admin/logrotate.if
+++ b/policy/modules/admin/logrotate.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`logrotate_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/netutils.if b/policy/modules/admin/netutils.if
index 0bd526e..a005782 100644
--- a/policy/modules/admin/netutils.if
+++ b/policy/modules/admin/netutils.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`netutils_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -86,7 +86,7 @@ interface(`netutils_signal',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -141,7 +141,7 @@ interface(`netutils_signal_ping',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -167,7 +167,7 @@ interface(`netutils_run_ping',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -214,7 +214,7 @@ interface(`netutils_exec_ping',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -233,7 +233,7 @@ interface(`netutils_domtrans_traceroute',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -259,7 +259,7 @@ interface(`netutils_run_traceroute',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/portage.if b/policy/modules/admin/portage.if
index 35161b2..8aaa46d 100644
--- a/policy/modules/admin/portage.if
+++ b/policy/modules/admin/portage.if
@@ -9,7 +9,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -32,7 +32,7 @@ interface(`portage_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -203,7 +203,7 @@ interface(`portage_compile_domain',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -225,7 +225,7 @@ interface(`portage_domtrans_gcc_config',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -251,7 +251,7 @@ interface(`portage_run_gcc_config',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain to not audit.
## </summary>
## </param>
#
@@ -270,7 +270,7 @@ interface(`portage_dontaudit_search_tmp',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain to not audit.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/prelink.if b/policy/modules/admin/prelink.if
index 89e8209..93ec175 100644
--- a/policy/modules/admin/prelink.if
+++ b/policy/modules/admin/prelink.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -49,7 +49,7 @@ interface(`prelink_exec',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/quota.if b/policy/modules/admin/quota.if
index fd8568e..6382d3c 100644
--- a/policy/modules/admin/quota.if
+++ b/policy/modules/admin/quota.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`quota_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -70,7 +70,7 @@ interface(`quota_dontaudit_getattr_db',`
## </summary>
## <param name="domain">
## <summary>
-## Domain to not audit.
+## Domain allowed access.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/rpm.if b/policy/modules/admin/rpm.if
index 2514ed5..86463e3 100644
--- a/policy/modules/admin/rpm.if
+++ b/policy/modules/admin/rpm.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -26,7 +26,7 @@ interface(`rpm_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -47,7 +47,7 @@ interface(`rpm_debuginfo_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -69,7 +69,7 @@ interface(`rpm_domtrans_script',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -211,7 +211,7 @@ interface(`rpm_dbus_chat',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain to not audit.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/shutdown.if b/policy/modules/admin/shutdown.if
index d26bad6..d2c068d 100644
--- a/policy/modules/admin/shutdown.if
+++ b/policy/modules/admin/shutdown.if
@@ -30,7 +30,7 @@ interface(`shutdown_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/tripwire.if b/policy/modules/admin/tripwire.if
index f623209..27abd88 100644
--- a/policy/modules/admin/tripwire.if
+++ b/policy/modules/admin/tripwire.if
@@ -19,7 +19,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -38,7 +38,7 @@ interface(`tripwire_domtrans_tripwire',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -63,7 +63,7 @@ interface(`tripwire_run_tripwire',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -82,7 +82,7 @@ interface(`tripwire_domtrans_twadmin',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -107,7 +107,7 @@ interface(`tripwire_run_twadmin',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -126,7 +126,7 @@ interface(`tripwire_domtrans_twprint',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -151,7 +151,7 @@ interface(`tripwire_run_twprint',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -170,7 +170,7 @@ interface(`tripwire_domtrans_siggen',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/tzdata.if b/policy/modules/admin/tzdata.if
index b873388..7747b16 100644
--- a/policy/modules/admin/tzdata.if
+++ b/policy/modules/admin/tzdata.if
@@ -24,7 +24,7 @@ interface(`tzdata_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/updfstab.if b/policy/modules/admin/updfstab.if
index 6a4f564..4d4b60e 100644
--- a/policy/modules/admin/updfstab.if
+++ b/policy/modules/admin/updfstab.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
diff --git a/policy/modules/admin/usbmodules.if b/policy/modules/admin/usbmodules.if
index eba81e2..b7eade3 100644
--- a/policy/modules/admin/usbmodules.if
+++ b/policy/modules/admin/usbmodules.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -26,7 +26,7 @@ interface(`usbmodules_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/usermanage.if b/policy/modules/admin/usermanage.if
index dd6ab1b..b56c212 100644
--- a/policy/modules/admin/usermanage.if
+++ b/policy/modules/admin/usermanage.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -31,7 +31,7 @@ interface(`usermanage_domtrans_chfn',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -55,7 +55,7 @@ interface(`usermanage_run_chfn',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -80,7 +80,7 @@ interface(`usermanage_domtrans_groupadd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -109,7 +109,7 @@ interface(`usermanage_run_groupadd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -133,7 +133,7 @@ interface(`usermanage_domtrans_passwd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain to not audit.
## </summary>
## </param>
#
@@ -152,7 +152,7 @@ interface(`usermanage_kill_passwd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -178,7 +178,7 @@ interface(`usermanage_run_passwd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -200,7 +200,7 @@ interface(`usermanage_domtrans_admin_passwd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
@@ -247,7 +247,7 @@ interface(`usermanage_dontaudit_use_useradd_fds',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -272,7 +272,7 @@ interface(`usermanage_domtrans_useradd',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/vbetool.if b/policy/modules/admin/vbetool.if
index 273d01d..f46ab17 100644
--- a/policy/modules/admin/vbetool.if
+++ b/policy/modules/admin/vbetool.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -26,7 +26,7 @@ interface(`vbetool_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
diff --git a/policy/modules/admin/vpn.if b/policy/modules/admin/vpn.if
index 7ed042a..64f8cdc 100644
--- a/policy/modules/admin/vpn.if
+++ b/policy/modules/admin/vpn.if
@@ -6,7 +6,7 @@
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
#
@@ -25,7 +25,7 @@ interface(`vpn_domtrans',`
## </summary>
## <param name="domain">
## <summary>
-## Domain allowed access.
+## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
--
1.7.2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100805/9166880c/attachment-0001.bin


2010-08-05 14:03:54

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [ admin layer patch 1/1] Admin layer xml fixes.

On 08/05/10 08:45, Dominick Grift wrote:
> Signed-off-by: Dominick Grift<[email protected]>

Merged.

> ---
> :100644 100644 d73c515... e66c296... M policy/modules/admin/acct.if
> :100644 100644 b4c78c7... fe09bea... M policy/modules/admin/alsa.if
> :100644 100644 90bef9e... d1d035e... M policy/modules/admin/amanda.if
> :100644 100644 722175d... 52ea86f... M policy/modules/admin/amtu.if
> :100644 100644 84668f1... e696b80... M policy/modules/admin/apt.if
> :100644 100644 cb1bdb3... 1017b7a... M policy/modules/admin/backup.if
> :100644 100644 25ffe4d... ebe8570... M policy/modules/admin/bootloader.if
> :100644 100644 563cae9... 953451a... M policy/modules/admin/certwatch.if
> :100644 100644 2f75a75... 0f57d3b... M policy/modules/admin/consoletype.if
> :100644 100644 1a43194... 9868652... M policy/modules/admin/ddcprobe.if
> :100644 100644 4035397... e1973c7... M policy/modules/admin/dmesg.if
> :100644 100644 d9f6ff2... 4bf435c... M policy/modules/admin/dmidecode.if
> :100644 100644 633495b... 9317171... M policy/modules/admin/dpkg.if
> :100644 100644 b65ebdb... 8fa451c... M policy/modules/admin/firstboot.if
> :100644 100644 52f2545... c18c920... M policy/modules/admin/kismet.if
> :100644 100644 585cd64... 65bcaff... M policy/modules/admin/kudzu.if
> :100644 100644 fa1c236... 6672183... M policy/modules/admin/logrotate.if
> :100644 100644 0bd526e... a005782... M policy/modules/admin/netutils.if
> :100644 100644 35161b2... 8aaa46d... M policy/modules/admin/portage.if
> :100644 100644 89e8209... 93ec175... M policy/modules/admin/prelink.if
> :100644 100644 fd8568e... 6382d3c... M policy/modules/admin/quota.if
> :100644 100644 2514ed5... 86463e3... M policy/modules/admin/rpm.if
> :100644 100644 d26bad6... d2c068d... M policy/modules/admin/shutdown.if
> :100644 100644 f623209... 27abd88... M policy/modules/admin/tripwire.if
> :100644 100644 b873388... 7747b16... M policy/modules/admin/tzdata.if
> :100644 100644 6a4f564... 4d4b60e... M policy/modules/admin/updfstab.if
> :100644 100644 eba81e2... b7eade3... M policy/modules/admin/usbmodules.if
> :100644 100644 dd6ab1b... b56c212... M policy/modules/admin/usermanage.if
> :100644 100644 273d01d... f46ab17... M policy/modules/admin/vbetool.if
> :100644 100644 7ed042a... 64f8cdc... M policy/modules/admin/vpn.if
> policy/modules/admin/acct.if | 2 +-
> policy/modules/admin/alsa.if | 2 +-
> policy/modules/admin/amanda.if | 8 ++++----
> policy/modules/admin/amtu.if | 4 ++--
> policy/modules/admin/apt.if | 7 +++----
> policy/modules/admin/backup.if | 4 ++--
> policy/modules/admin/bootloader.if | 4 ++--
> policy/modules/admin/certwatch.if | 6 +++---
> policy/modules/admin/consoletype.if | 4 ++--
> policy/modules/admin/ddcprobe.if | 4 ++--
> policy/modules/admin/dmesg.if | 2 +-
> policy/modules/admin/dmidecode.if | 4 ++--
> policy/modules/admin/dpkg.if | 6 +++---
> policy/modules/admin/firstboot.if | 4 ++--
> policy/modules/admin/kismet.if | 6 +++---
> policy/modules/admin/kudzu.if | 4 ++--
> policy/modules/admin/logrotate.if | 4 ++--
> policy/modules/admin/netutils.if | 16 ++++++++--------
> policy/modules/admin/portage.if | 12 ++++++------
> policy/modules/admin/prelink.if | 4 ++--
> policy/modules/admin/quota.if | 6 +++---
> policy/modules/admin/rpm.if | 10 +++++-----
> policy/modules/admin/shutdown.if | 2 +-
> policy/modules/admin/tripwire.if | 16 ++++++++--------
> policy/modules/admin/tzdata.if | 2 +-
> policy/modules/admin/updfstab.if | 2 +-
> policy/modules/admin/usbmodules.if | 4 ++--
> policy/modules/admin/usermanage.if | 22 +++++++++++-----------
> policy/modules/admin/vbetool.if | 4 ++--
> policy/modules/admin/vpn.if | 4 ++--
> 30 files changed, 89 insertions(+), 90 deletions(-)
>
> diff --git a/policy/modules/admin/acct.if b/policy/modules/admin/acct.if
> index d73c515..e66c296 100644
> --- a/policy/modules/admin/acct.if
> +++ b/policy/modules/admin/acct.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if
> index b4c78c7..fe09bea 100644
> --- a/policy/modules/admin/alsa.if
> +++ b/policy/modules/admin/alsa.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/amanda.if b/policy/modules/admin/amanda.if
> index 90bef9e..d1d035e 100644
> --- a/policy/modules/admin/amanda.if
> +++ b/policy/modules/admin/amanda.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`amanda_domtrans_recover',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -87,7 +87,7 @@ interface(`amanda_dontaudit_read_dumpdates',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain to allow
> +## Domain allowed access.
> ## </summary>
> ##</param>
> #
> @@ -124,7 +124,7 @@ interface(`amanda_manage_lib',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain to allow
> +## Domain allowed access.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/amtu.if b/policy/modules/admin/amtu.if
> index 722175d..52ea86f 100644
> --- a/policy/modules/admin/amtu.if
> +++ b/policy/modules/admin/amtu.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -26,7 +26,7 @@ interface(`amtu_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/apt.if b/policy/modules/admin/apt.if
> index 84668f1..e696b80 100644
> --- a/policy/modules/admin/apt.if
> +++ b/policy/modules/admin/apt.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -26,7 +26,7 @@ interface(`apt_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -71,8 +71,7 @@ interface(`apt_use_fds',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## The type of the process attempting performing this action
> -## which should not be audited.
> +## Domain to not audit.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/backup.if b/policy/modules/admin/backup.if
> index cb1bdb3..1017b7a 100644
> --- a/policy/modules/admin/backup.if
> +++ b/policy/modules/admin/backup.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`backup_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if
> index 25ffe4d..ebe8570 100644
> --- a/policy/modules/admin/bootloader.if
> +++ b/policy/modules/admin/bootloader.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`bootloader_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/certwatch.if b/policy/modules/admin/certwatch.if
> index 563cae9..953451a 100644
> --- a/policy/modules/admin/certwatch.if
> +++ b/policy/modules/admin/certwatch.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -29,7 +29,7 @@ interface(`certwatch_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -57,7 +57,7 @@ interface(`certwatch_run',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/consoletype.if b/policy/modules/admin/consoletype.if
> index 2f75a75..0f57d3b 100644
> --- a/policy/modules/admin/consoletype.if
> +++ b/policy/modules/admin/consoletype.if
> @@ -8,7 +8,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -32,7 +32,7 @@ interface(`consoletype_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/ddcprobe.if b/policy/modules/admin/ddcprobe.if
> index 1a43194..9868652 100644
> --- a/policy/modules/admin/ddcprobe.if
> +++ b/policy/modules/admin/ddcprobe.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`ddcprobe_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/dmesg.if b/policy/modules/admin/dmesg.if
> index 4035397..e1973c7 100644
> --- a/policy/modules/admin/dmesg.if
> +++ b/policy/modules/admin/dmesg.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/dmidecode.if b/policy/modules/admin/dmidecode.if
> index d9f6ff2..4bf435c 100644
> --- a/policy/modules/admin/dmidecode.if
> +++ b/policy/modules/admin/dmidecode.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -30,7 +30,7 @@ interface(`dmidecode_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/dpkg.if b/policy/modules/admin/dpkg.if
> index 633495b..9317171 100644
> --- a/policy/modules/admin/dpkg.if
> +++ b/policy/modules/admin/dpkg.if
> @@ -8,7 +8,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -28,7 +28,7 @@ interface(`dpkg_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -50,7 +50,7 @@ interface(`dpkg_domtrans_script',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/firstboot.if b/policy/modules/admin/firstboot.if
> index b65ebdb..8fa451c 100644
> --- a/policy/modules/admin/firstboot.if
> +++ b/policy/modules/admin/firstboot.if
> @@ -9,7 +9,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -28,7 +28,7 @@ interface(`firstboot_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/kismet.if b/policy/modules/admin/kismet.if
> index 52f2545..c18c920 100644
> --- a/policy/modules/admin/kismet.if
> +++ b/policy/modules/admin/kismet.if
> @@ -26,7 +26,7 @@ interface(`kismet_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -188,7 +188,7 @@ interface(`kismet_read_log',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed to transition.
> +## Domain allowed access.
> ## </summary>
> ##</param>
> #
> @@ -207,7 +207,7 @@ interface(`kismet_append_log',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain to not audit.
> +## Domain allowed access.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/kudzu.if b/policy/modules/admin/kudzu.if
> index 585cd64..65bcaff 100644
> --- a/policy/modules/admin/kudzu.if
> +++ b/policy/modules/admin/kudzu.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`kudzu_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/logrotate.if b/policy/modules/admin/logrotate.if
> index fa1c236..6672183 100644
> --- a/policy/modules/admin/logrotate.if
> +++ b/policy/modules/admin/logrotate.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`logrotate_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/netutils.if b/policy/modules/admin/netutils.if
> index 0bd526e..a005782 100644
> --- a/policy/modules/admin/netutils.if
> +++ b/policy/modules/admin/netutils.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`netutils_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -86,7 +86,7 @@ interface(`netutils_signal',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -141,7 +141,7 @@ interface(`netutils_signal_ping',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -167,7 +167,7 @@ interface(`netutils_run_ping',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -214,7 +214,7 @@ interface(`netutils_exec_ping',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -233,7 +233,7 @@ interface(`netutils_domtrans_traceroute',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -259,7 +259,7 @@ interface(`netutils_run_traceroute',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/portage.if b/policy/modules/admin/portage.if
> index 35161b2..8aaa46d 100644
> --- a/policy/modules/admin/portage.if
> +++ b/policy/modules/admin/portage.if
> @@ -9,7 +9,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -32,7 +32,7 @@ interface(`portage_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -203,7 +203,7 @@ interface(`portage_compile_domain',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -225,7 +225,7 @@ interface(`portage_domtrans_gcc_config',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -251,7 +251,7 @@ interface(`portage_run_gcc_config',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain to not audit.
> ## </summary>
> ##</param>
> #
> @@ -270,7 +270,7 @@ interface(`portage_dontaudit_search_tmp',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain to not audit.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/prelink.if b/policy/modules/admin/prelink.if
> index 89e8209..93ec175 100644
> --- a/policy/modules/admin/prelink.if
> +++ b/policy/modules/admin/prelink.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -49,7 +49,7 @@ interface(`prelink_exec',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/quota.if b/policy/modules/admin/quota.if
> index fd8568e..6382d3c 100644
> --- a/policy/modules/admin/quota.if
> +++ b/policy/modules/admin/quota.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`quota_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -70,7 +70,7 @@ interface(`quota_dontaudit_getattr_db',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain to not audit.
> +## Domain allowed access.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/rpm.if b/policy/modules/admin/rpm.if
> index 2514ed5..86463e3 100644
> --- a/policy/modules/admin/rpm.if
> +++ b/policy/modules/admin/rpm.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -26,7 +26,7 @@ interface(`rpm_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -47,7 +47,7 @@ interface(`rpm_debuginfo_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -69,7 +69,7 @@ interface(`rpm_domtrans_script',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -211,7 +211,7 @@ interface(`rpm_dbus_chat',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain to not audit.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/shutdown.if b/policy/modules/admin/shutdown.if
> index d26bad6..d2c068d 100644
> --- a/policy/modules/admin/shutdown.if
> +++ b/policy/modules/admin/shutdown.if
> @@ -30,7 +30,7 @@ interface(`shutdown_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/tripwire.if b/policy/modules/admin/tripwire.if
> index f623209..27abd88 100644
> --- a/policy/modules/admin/tripwire.if
> +++ b/policy/modules/admin/tripwire.if
> @@ -19,7 +19,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -38,7 +38,7 @@ interface(`tripwire_domtrans_tripwire',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -63,7 +63,7 @@ interface(`tripwire_run_tripwire',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -82,7 +82,7 @@ interface(`tripwire_domtrans_twadmin',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -107,7 +107,7 @@ interface(`tripwire_run_twadmin',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -126,7 +126,7 @@ interface(`tripwire_domtrans_twprint',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -151,7 +151,7 @@ interface(`tripwire_run_twprint',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -170,7 +170,7 @@ interface(`tripwire_domtrans_siggen',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/tzdata.if b/policy/modules/admin/tzdata.if
> index b873388..7747b16 100644
> --- a/policy/modules/admin/tzdata.if
> +++ b/policy/modules/admin/tzdata.if
> @@ -24,7 +24,7 @@ interface(`tzdata_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/updfstab.if b/policy/modules/admin/updfstab.if
> index 6a4f564..4d4b60e 100644
> --- a/policy/modules/admin/updfstab.if
> +++ b/policy/modules/admin/updfstab.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> diff --git a/policy/modules/admin/usbmodules.if b/policy/modules/admin/usbmodules.if
> index eba81e2..b7eade3 100644
> --- a/policy/modules/admin/usbmodules.if
> +++ b/policy/modules/admin/usbmodules.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -26,7 +26,7 @@ interface(`usbmodules_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/usermanage.if b/policy/modules/admin/usermanage.if
> index dd6ab1b..b56c212 100644
> --- a/policy/modules/admin/usermanage.if
> +++ b/policy/modules/admin/usermanage.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -31,7 +31,7 @@ interface(`usermanage_domtrans_chfn',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -55,7 +55,7 @@ interface(`usermanage_run_chfn',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -80,7 +80,7 @@ interface(`usermanage_domtrans_groupadd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -109,7 +109,7 @@ interface(`usermanage_run_groupadd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -133,7 +133,7 @@ interface(`usermanage_domtrans_passwd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain to not audit.
> ## </summary>
> ##</param>
> #
> @@ -152,7 +152,7 @@ interface(`usermanage_kill_passwd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -178,7 +178,7 @@ interface(`usermanage_run_passwd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -200,7 +200,7 @@ interface(`usermanage_domtrans_admin_passwd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> @@ -247,7 +247,7 @@ interface(`usermanage_dontaudit_use_useradd_fds',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -272,7 +272,7 @@ interface(`usermanage_domtrans_useradd',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/vbetool.if b/policy/modules/admin/vbetool.if
> index 273d01d..f46ab17 100644
> --- a/policy/modules/admin/vbetool.if
> +++ b/policy/modules/admin/vbetool.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -26,7 +26,7 @@ interface(`vbetool_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
> diff --git a/policy/modules/admin/vpn.if b/policy/modules/admin/vpn.if
> index 7ed042a..64f8cdc 100644
> --- a/policy/modules/admin/vpn.if
> +++ b/policy/modules/admin/vpn.if
> @@ -6,7 +6,7 @@
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> #
> @@ -25,7 +25,7 @@ interface(`vpn_domtrans',`
> ##</summary>
> ##<param name="domain">
> ## <summary>
> -## Domain allowed access.
> +## Domain allowed to transition.
> ## </summary>
> ##</param>
> ##<param name="role">
>
>
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy


--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com