2010-10-08 13:57:09

by domg472

[permalink] [raw]
Subject: [refpolicy] [ patch 1/1] su: redundant, init_dontaudit_use_script_ptys($1_su_t)

Signed-off-by: Dominick Grift <[email protected]>
---
:100644 100644 a0aa8c5... 28a4e3d... M policy/modules/admin/su.if
policy/modules/admin/su.if | 5 -----
1 files changed, 0 insertions(+), 5 deletions(-)

diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if
index a0aa8c5..28a4e3d 100644
--- a/policy/modules/admin/su.if
+++ b/policy/modules/admin/su.if
@@ -135,11 +135,6 @@ template(`su_restricted_domain_template', `
# used when the password has expired
usermanage_read_crack_db($1_su_t)
')
-
- ifdef(`TODO',`
- # Caused by su - init scripts
- dontaudit $1_su_t initrc_devpts_t:chr_file { getattr ioctl };
- ') dnl end TODO
')

#######################################
--
1.7.2.3

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20101008/45cf9ac2/attachment.bin


2010-10-11 13:37:26

by cpebenito

[permalink] [raw]
Subject: [refpolicy] [ patch 1/1] su: redundant, init_dontaudit_use_script_ptys($1_su_t)

On 10/08/10 09:57, Dominick Grift wrote:
> Signed-off-by: Dominick Grift<[email protected]>
> ---
> :100644 100644 a0aa8c5... 28a4e3d... M policy/modules/admin/su.if
> policy/modules/admin/su.if | 5 -----
> 1 files changed, 0 insertions(+), 5 deletions(-)
>
> diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if
> index a0aa8c5..28a4e3d 100644
> --- a/policy/modules/admin/su.if
> +++ b/policy/modules/admin/su.if
> @@ -135,11 +135,6 @@ template(`su_restricted_domain_template', `
> # used when the password has expired
> usermanage_read_crack_db($1_su_t)
> ')
> -
> - ifdef(`TODO',`
> - # Caused by su - init scripts
> - dontaudit $1_su_t initrc_devpts_t:chr_file { getattr ioctl };
> - ') dnl end TODO
> ')
>
> #######################################

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com