From: domg472@gmail.com (Dominick Grift) Date: Thu, 5 Aug 2010 14:45:31 +0200 Subject: [refpolicy] [ admin layer patch 1/1] Admin layer xml fixes. Message-ID: <20100805124525.GA27097@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- :100644 100644 d73c515... e66c296... M policy/modules/admin/acct.if :100644 100644 b4c78c7... fe09bea... M policy/modules/admin/alsa.if :100644 100644 90bef9e... d1d035e... M policy/modules/admin/amanda.if :100644 100644 722175d... 52ea86f... M policy/modules/admin/amtu.if :100644 100644 84668f1... e696b80... M policy/modules/admin/apt.if :100644 100644 cb1bdb3... 1017b7a... M policy/modules/admin/backup.if :100644 100644 25ffe4d... ebe8570... M policy/modules/admin/bootloader.if :100644 100644 563cae9... 953451a... M policy/modules/admin/certwatch.if :100644 100644 2f75a75... 0f57d3b... M policy/modules/admin/consoletype.if :100644 100644 1a43194... 9868652... M policy/modules/admin/ddcprobe.if :100644 100644 4035397... e1973c7... M policy/modules/admin/dmesg.if :100644 100644 d9f6ff2... 4bf435c... M policy/modules/admin/dmidecode.if :100644 100644 633495b... 9317171... M policy/modules/admin/dpkg.if :100644 100644 b65ebdb... 8fa451c... M policy/modules/admin/firstboot.if :100644 100644 52f2545... c18c920... M policy/modules/admin/kismet.if :100644 100644 585cd64... 65bcaff... M policy/modules/admin/kudzu.if :100644 100644 fa1c236... 6672183... M policy/modules/admin/logrotate.if :100644 100644 0bd526e... a005782... M policy/modules/admin/netutils.if :100644 100644 35161b2... 8aaa46d... M policy/modules/admin/portage.if :100644 100644 89e8209... 93ec175... M policy/modules/admin/prelink.if :100644 100644 fd8568e... 6382d3c... M policy/modules/admin/quota.if :100644 100644 2514ed5... 86463e3... M policy/modules/admin/rpm.if :100644 100644 d26bad6... d2c068d... M policy/modules/admin/shutdown.if :100644 100644 f623209... 27abd88... M policy/modules/admin/tripwire.if :100644 100644 b873388... 7747b16... M policy/modules/admin/tzdata.if :100644 100644 6a4f564... 4d4b60e... M policy/modules/admin/updfstab.if :100644 100644 eba81e2... b7eade3... M policy/modules/admin/usbmodules.if :100644 100644 dd6ab1b... b56c212... M policy/modules/admin/usermanage.if :100644 100644 273d01d... f46ab17... M policy/modules/admin/vbetool.if :100644 100644 7ed042a... 64f8cdc... M policy/modules/admin/vpn.if policy/modules/admin/acct.if | 2 +- policy/modules/admin/alsa.if | 2 +- policy/modules/admin/amanda.if | 8 ++++---- policy/modules/admin/amtu.if | 4 ++-- policy/modules/admin/apt.if | 7 +++---- policy/modules/admin/backup.if | 4 ++-- policy/modules/admin/bootloader.if | 4 ++-- policy/modules/admin/certwatch.if | 6 +++--- policy/modules/admin/consoletype.if | 4 ++-- policy/modules/admin/ddcprobe.if | 4 ++-- policy/modules/admin/dmesg.if | 2 +- policy/modules/admin/dmidecode.if | 4 ++-- policy/modules/admin/dpkg.if | 6 +++--- policy/modules/admin/firstboot.if | 4 ++-- policy/modules/admin/kismet.if | 6 +++--- policy/modules/admin/kudzu.if | 4 ++-- policy/modules/admin/logrotate.if | 4 ++-- policy/modules/admin/netutils.if | 16 ++++++++-------- policy/modules/admin/portage.if | 12 ++++++------ policy/modules/admin/prelink.if | 4 ++-- policy/modules/admin/quota.if | 6 +++--- policy/modules/admin/rpm.if | 10 +++++----- policy/modules/admin/shutdown.if | 2 +- policy/modules/admin/tripwire.if | 16 ++++++++-------- policy/modules/admin/tzdata.if | 2 +- policy/modules/admin/updfstab.if | 2 +- policy/modules/admin/usbmodules.if | 4 ++-- policy/modules/admin/usermanage.if | 22 +++++++++++----------- policy/modules/admin/vbetool.if | 4 ++-- policy/modules/admin/vpn.if | 4 ++-- 30 files changed, 89 insertions(+), 90 deletions(-) diff --git a/policy/modules/admin/acct.if b/policy/modules/admin/acct.if index d73c515..e66c296 100644 --- a/policy/modules/admin/acct.if +++ b/policy/modules/admin/acct.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if index b4c78c7..fe09bea 100644 --- a/policy/modules/admin/alsa.if +++ b/policy/modules/admin/alsa.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/admin/amanda.if b/policy/modules/admin/amanda.if index 90bef9e..d1d035e 100644 --- a/policy/modules/admin/amanda.if +++ b/policy/modules/admin/amanda.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`amanda_domtrans_recover',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -87,7 +87,7 @@ interface(`amanda_dontaudit_read_dumpdates',` ## ## ## -## Domain to allow +## Domain allowed access. ## ## # @@ -124,7 +124,7 @@ interface(`amanda_manage_lib',` ## ## ## -## Domain to allow +## Domain allowed access. ## ## # diff --git a/policy/modules/admin/amtu.if b/policy/modules/admin/amtu.if index 722175d..52ea86f 100644 --- a/policy/modules/admin/amtu.if +++ b/policy/modules/admin/amtu.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`amtu_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/apt.if b/policy/modules/admin/apt.if index 84668f1..e696b80 100644 --- a/policy/modules/admin/apt.if +++ b/policy/modules/admin/apt.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`apt_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -71,8 +71,7 @@ interface(`apt_use_fds',` ## ## ## -## The type of the process attempting performing this action -## which should not be audited. +## Domain to not audit. ## ## # diff --git a/policy/modules/admin/backup.if b/policy/modules/admin/backup.if index cb1bdb3..1017b7a 100644 --- a/policy/modules/admin/backup.if +++ b/policy/modules/admin/backup.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`backup_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if index 25ffe4d..ebe8570 100644 --- a/policy/modules/admin/bootloader.if +++ b/policy/modules/admin/bootloader.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`bootloader_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/certwatch.if b/policy/modules/admin/certwatch.if index 563cae9..953451a 100644 --- a/policy/modules/admin/certwatch.if +++ b/policy/modules/admin/certwatch.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -29,7 +29,7 @@ interface(`certwatch_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -57,7 +57,7 @@ interface(`certwatch_run',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/consoletype.if b/policy/modules/admin/consoletype.if index 2f75a75..0f57d3b 100644 --- a/policy/modules/admin/consoletype.if +++ b/policy/modules/admin/consoletype.if @@ -8,7 +8,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -32,7 +32,7 @@ interface(`consoletype_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/ddcprobe.if b/policy/modules/admin/ddcprobe.if index 1a43194..9868652 100644 --- a/policy/modules/admin/ddcprobe.if +++ b/policy/modules/admin/ddcprobe.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`ddcprobe_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/dmesg.if b/policy/modules/admin/dmesg.if index 4035397..e1973c7 100644 --- a/policy/modules/admin/dmesg.if +++ b/policy/modules/admin/dmesg.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/admin/dmidecode.if b/policy/modules/admin/dmidecode.if index d9f6ff2..4bf435c 100644 --- a/policy/modules/admin/dmidecode.if +++ b/policy/modules/admin/dmidecode.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -30,7 +30,7 @@ interface(`dmidecode_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/dpkg.if b/policy/modules/admin/dpkg.if index 633495b..9317171 100644 --- a/policy/modules/admin/dpkg.if +++ b/policy/modules/admin/dpkg.if @@ -8,7 +8,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -28,7 +28,7 @@ interface(`dpkg_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -50,7 +50,7 @@ interface(`dpkg_domtrans_script',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/firstboot.if b/policy/modules/admin/firstboot.if index b65ebdb..8fa451c 100644 --- a/policy/modules/admin/firstboot.if +++ b/policy/modules/admin/firstboot.if @@ -9,7 +9,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -28,7 +28,7 @@ interface(`firstboot_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/kismet.if b/policy/modules/admin/kismet.if index 52f2545..c18c920 100644 --- a/policy/modules/admin/kismet.if +++ b/policy/modules/admin/kismet.if @@ -26,7 +26,7 @@ interface(`kismet_domtrans',` ## ## ## -## Domain allowed access +## Domain allowed to transition. ## ## ## @@ -188,7 +188,7 @@ interface(`kismet_read_log',` ## ## ## -## Domain allowed to transition. +## Domain allowed access. ## ## # @@ -207,7 +207,7 @@ interface(`kismet_append_log',` ## ## ## -## Domain to not audit. +## Domain allowed access. ## ## # diff --git a/policy/modules/admin/kudzu.if b/policy/modules/admin/kudzu.if index 585cd64..65bcaff 100644 --- a/policy/modules/admin/kudzu.if +++ b/policy/modules/admin/kudzu.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`kudzu_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/logrotate.if b/policy/modules/admin/logrotate.if index fa1c236..6672183 100644 --- a/policy/modules/admin/logrotate.if +++ b/policy/modules/admin/logrotate.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`logrotate_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/netutils.if b/policy/modules/admin/netutils.if index 0bd526e..a005782 100644 --- a/policy/modules/admin/netutils.if +++ b/policy/modules/admin/netutils.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`netutils_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -86,7 +86,7 @@ interface(`netutils_signal',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -141,7 +141,7 @@ interface(`netutils_signal_ping',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -167,7 +167,7 @@ interface(`netutils_run_ping',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -214,7 +214,7 @@ interface(`netutils_exec_ping',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -233,7 +233,7 @@ interface(`netutils_domtrans_traceroute',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -259,7 +259,7 @@ interface(`netutils_run_traceroute',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/portage.if b/policy/modules/admin/portage.if index 35161b2..8aaa46d 100644 --- a/policy/modules/admin/portage.if +++ b/policy/modules/admin/portage.if @@ -9,7 +9,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -32,7 +32,7 @@ interface(`portage_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -203,7 +203,7 @@ interface(`portage_compile_domain',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -225,7 +225,7 @@ interface(`portage_domtrans_gcc_config',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -251,7 +251,7 @@ interface(`portage_run_gcc_config',` ## ## ## -## Domain allowed access. +## Domain to not audit. ## ## # @@ -270,7 +270,7 @@ interface(`portage_dontaudit_search_tmp',` ## ## ## -## Domain allowed access. +## Domain to not audit. ## ## # diff --git a/policy/modules/admin/prelink.if b/policy/modules/admin/prelink.if index 89e8209..93ec175 100644 --- a/policy/modules/admin/prelink.if +++ b/policy/modules/admin/prelink.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -49,7 +49,7 @@ interface(`prelink_exec',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/quota.if b/policy/modules/admin/quota.if index fd8568e..6382d3c 100644 --- a/policy/modules/admin/quota.if +++ b/policy/modules/admin/quota.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`quota_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -70,7 +70,7 @@ interface(`quota_dontaudit_getattr_db',` ## ## ## -## Domain to not audit. +## Domain allowed access. ## ## # diff --git a/policy/modules/admin/rpm.if b/policy/modules/admin/rpm.if index 2514ed5..86463e3 100644 --- a/policy/modules/admin/rpm.if +++ b/policy/modules/admin/rpm.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`rpm_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -47,7 +47,7 @@ interface(`rpm_debuginfo_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -69,7 +69,7 @@ interface(`rpm_domtrans_script',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -211,7 +211,7 @@ interface(`rpm_dbus_chat',` ## ## ## -## Domain allowed access. +## Domain to not audit. ## ## # diff --git a/policy/modules/admin/shutdown.if b/policy/modules/admin/shutdown.if index d26bad6..d2c068d 100644 --- a/policy/modules/admin/shutdown.if +++ b/policy/modules/admin/shutdown.if @@ -30,7 +30,7 @@ interface(`shutdown_domtrans',` ## ## ## -## Domain allowed access +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/tripwire.if b/policy/modules/admin/tripwire.if index f623209..27abd88 100644 --- a/policy/modules/admin/tripwire.if +++ b/policy/modules/admin/tripwire.if @@ -19,7 +19,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -38,7 +38,7 @@ interface(`tripwire_domtrans_tripwire',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -63,7 +63,7 @@ interface(`tripwire_run_tripwire',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -82,7 +82,7 @@ interface(`tripwire_domtrans_twadmin',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -107,7 +107,7 @@ interface(`tripwire_run_twadmin',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -126,7 +126,7 @@ interface(`tripwire_domtrans_twprint',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -151,7 +151,7 @@ interface(`tripwire_run_twprint',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -170,7 +170,7 @@ interface(`tripwire_domtrans_siggen',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/tzdata.if b/policy/modules/admin/tzdata.if index b873388..7747b16 100644 --- a/policy/modules/admin/tzdata.if +++ b/policy/modules/admin/tzdata.if @@ -24,7 +24,7 @@ interface(`tzdata_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/updfstab.if b/policy/modules/admin/updfstab.if index 6a4f564..4d4b60e 100644 --- a/policy/modules/admin/updfstab.if +++ b/policy/modules/admin/updfstab.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/admin/usbmodules.if b/policy/modules/admin/usbmodules.if index eba81e2..b7eade3 100644 --- a/policy/modules/admin/usbmodules.if +++ b/policy/modules/admin/usbmodules.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`usbmodules_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/usermanage.if b/policy/modules/admin/usermanage.if index dd6ab1b..b56c212 100644 --- a/policy/modules/admin/usermanage.if +++ b/policy/modules/admin/usermanage.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -31,7 +31,7 @@ interface(`usermanage_domtrans_chfn',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -55,7 +55,7 @@ interface(`usermanage_run_chfn',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -80,7 +80,7 @@ interface(`usermanage_domtrans_groupadd',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -109,7 +109,7 @@ interface(`usermanage_run_groupadd',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -133,7 +133,7 @@ interface(`usermanage_domtrans_passwd',` ## ## ## -## Domain allowed access. +## Domain to not audit. ## ## # @@ -152,7 +152,7 @@ interface(`usermanage_kill_passwd',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -178,7 +178,7 @@ interface(`usermanage_run_passwd',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -200,7 +200,7 @@ interface(`usermanage_domtrans_admin_passwd',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -247,7 +247,7 @@ interface(`usermanage_dontaudit_use_useradd_fds',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -272,7 +272,7 @@ interface(`usermanage_domtrans_useradd',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/vbetool.if b/policy/modules/admin/vbetool.if index 273d01d..f46ab17 100644 --- a/policy/modules/admin/vbetool.if +++ b/policy/modules/admin/vbetool.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`vbetool_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/admin/vpn.if b/policy/modules/admin/vpn.if index 7ed042a..64f8cdc 100644 --- a/policy/modules/admin/vpn.if +++ b/policy/modules/admin/vpn.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`vpn_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## -- 1.7.2 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100805/9166880c/attachment-0001.bin