From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Thu, 05 Aug 2010 10:03:54 -0400 Subject: [refpolicy] [ admin layer patch 1/1] Admin layer xml fixes. In-Reply-To: <20100805124525.GA27097@localhost.localdomain> References: <20100805124525.GA27097@localhost.localdomain> Message-ID: <4C5AC4CA.4050306@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 08/05/10 08:45, Dominick Grift wrote: > Signed-off-by: Dominick Grift Merged. > --- > :100644 100644 d73c515... e66c296... M policy/modules/admin/acct.if > :100644 100644 b4c78c7... fe09bea... M policy/modules/admin/alsa.if > :100644 100644 90bef9e... d1d035e... M policy/modules/admin/amanda.if > :100644 100644 722175d... 52ea86f... M policy/modules/admin/amtu.if > :100644 100644 84668f1... e696b80... M policy/modules/admin/apt.if > :100644 100644 cb1bdb3... 1017b7a... M policy/modules/admin/backup.if > :100644 100644 25ffe4d... ebe8570... M policy/modules/admin/bootloader.if > :100644 100644 563cae9... 953451a... M policy/modules/admin/certwatch.if > :100644 100644 2f75a75... 0f57d3b... M policy/modules/admin/consoletype.if > :100644 100644 1a43194... 9868652... M policy/modules/admin/ddcprobe.if > :100644 100644 4035397... e1973c7... M policy/modules/admin/dmesg.if > :100644 100644 d9f6ff2... 4bf435c... M policy/modules/admin/dmidecode.if > :100644 100644 633495b... 9317171... M policy/modules/admin/dpkg.if > :100644 100644 b65ebdb... 8fa451c... M policy/modules/admin/firstboot.if > :100644 100644 52f2545... c18c920... M policy/modules/admin/kismet.if > :100644 100644 585cd64... 65bcaff... M policy/modules/admin/kudzu.if > :100644 100644 fa1c236... 6672183... M policy/modules/admin/logrotate.if > :100644 100644 0bd526e... a005782... M policy/modules/admin/netutils.if > :100644 100644 35161b2... 8aaa46d... M policy/modules/admin/portage.if > :100644 100644 89e8209... 93ec175... M policy/modules/admin/prelink.if > :100644 100644 fd8568e... 6382d3c... M policy/modules/admin/quota.if > :100644 100644 2514ed5... 86463e3... M policy/modules/admin/rpm.if > :100644 100644 d26bad6... d2c068d... M policy/modules/admin/shutdown.if > :100644 100644 f623209... 27abd88... M policy/modules/admin/tripwire.if > :100644 100644 b873388... 7747b16... M policy/modules/admin/tzdata.if > :100644 100644 6a4f564... 4d4b60e... M policy/modules/admin/updfstab.if > :100644 100644 eba81e2... b7eade3... M policy/modules/admin/usbmodules.if > :100644 100644 dd6ab1b... b56c212... M policy/modules/admin/usermanage.if > :100644 100644 273d01d... f46ab17... M policy/modules/admin/vbetool.if > :100644 100644 7ed042a... 64f8cdc... M policy/modules/admin/vpn.if > policy/modules/admin/acct.if | 2 +- > policy/modules/admin/alsa.if | 2 +- > policy/modules/admin/amanda.if | 8 ++++---- > policy/modules/admin/amtu.if | 4 ++-- > policy/modules/admin/apt.if | 7 +++---- > policy/modules/admin/backup.if | 4 ++-- > policy/modules/admin/bootloader.if | 4 ++-- > policy/modules/admin/certwatch.if | 6 +++--- > policy/modules/admin/consoletype.if | 4 ++-- > policy/modules/admin/ddcprobe.if | 4 ++-- > policy/modules/admin/dmesg.if | 2 +- > policy/modules/admin/dmidecode.if | 4 ++-- > policy/modules/admin/dpkg.if | 6 +++--- > policy/modules/admin/firstboot.if | 4 ++-- > policy/modules/admin/kismet.if | 6 +++--- > policy/modules/admin/kudzu.if | 4 ++-- > policy/modules/admin/logrotate.if | 4 ++-- > policy/modules/admin/netutils.if | 16 ++++++++-------- > policy/modules/admin/portage.if | 12 ++++++------ > policy/modules/admin/prelink.if | 4 ++-- > policy/modules/admin/quota.if | 6 +++--- > policy/modules/admin/rpm.if | 10 +++++----- > policy/modules/admin/shutdown.if | 2 +- > policy/modules/admin/tripwire.if | 16 ++++++++-------- > policy/modules/admin/tzdata.if | 2 +- > policy/modules/admin/updfstab.if | 2 +- > policy/modules/admin/usbmodules.if | 4 ++-- > policy/modules/admin/usermanage.if | 22 +++++++++++----------- > policy/modules/admin/vbetool.if | 4 ++-- > policy/modules/admin/vpn.if | 4 ++-- > 30 files changed, 89 insertions(+), 90 deletions(-) > > diff --git a/policy/modules/admin/acct.if b/policy/modules/admin/acct.if > index d73c515..e66c296 100644 > --- a/policy/modules/admin/acct.if > +++ b/policy/modules/admin/acct.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > diff --git a/policy/modules/admin/alsa.if b/policy/modules/admin/alsa.if > index b4c78c7..fe09bea 100644 > --- a/policy/modules/admin/alsa.if > +++ b/policy/modules/admin/alsa.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > diff --git a/policy/modules/admin/amanda.if b/policy/modules/admin/amanda.if > index 90bef9e..d1d035e 100644 > --- a/policy/modules/admin/amanda.if > +++ b/policy/modules/admin/amanda.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`amanda_domtrans_recover',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -87,7 +87,7 @@ interface(`amanda_dontaudit_read_dumpdates',` > ## > ## > ## > -## Domain to allow > +## Domain allowed access. > ## > ## > # > @@ -124,7 +124,7 @@ interface(`amanda_manage_lib',` > ## > ## > ## > -## Domain to allow > +## Domain allowed access. > ## > ## > # > diff --git a/policy/modules/admin/amtu.if b/policy/modules/admin/amtu.if > index 722175d..52ea86f 100644 > --- a/policy/modules/admin/amtu.if > +++ b/policy/modules/admin/amtu.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -26,7 +26,7 @@ interface(`amtu_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/apt.if b/policy/modules/admin/apt.if > index 84668f1..e696b80 100644 > --- a/policy/modules/admin/apt.if > +++ b/policy/modules/admin/apt.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -26,7 +26,7 @@ interface(`apt_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -71,8 +71,7 @@ interface(`apt_use_fds',` > ## > ## > ## > -## The type of the process attempting performing this action > -## which should not be audited. > +## Domain to not audit. > ## > ## > # > diff --git a/policy/modules/admin/backup.if b/policy/modules/admin/backup.if > index cb1bdb3..1017b7a 100644 > --- a/policy/modules/admin/backup.if > +++ b/policy/modules/admin/backup.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`backup_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if > index 25ffe4d..ebe8570 100644 > --- a/policy/modules/admin/bootloader.if > +++ b/policy/modules/admin/bootloader.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`bootloader_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/certwatch.if b/policy/modules/admin/certwatch.if > index 563cae9..953451a 100644 > --- a/policy/modules/admin/certwatch.if > +++ b/policy/modules/admin/certwatch.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -29,7 +29,7 @@ interface(`certwatch_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -57,7 +57,7 @@ interface(`certwatch_run',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/consoletype.if b/policy/modules/admin/consoletype.if > index 2f75a75..0f57d3b 100644 > --- a/policy/modules/admin/consoletype.if > +++ b/policy/modules/admin/consoletype.if > @@ -8,7 +8,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -32,7 +32,7 @@ interface(`consoletype_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/ddcprobe.if b/policy/modules/admin/ddcprobe.if > index 1a43194..9868652 100644 > --- a/policy/modules/admin/ddcprobe.if > +++ b/policy/modules/admin/ddcprobe.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`ddcprobe_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/dmesg.if b/policy/modules/admin/dmesg.if > index 4035397..e1973c7 100644 > --- a/policy/modules/admin/dmesg.if > +++ b/policy/modules/admin/dmesg.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > diff --git a/policy/modules/admin/dmidecode.if b/policy/modules/admin/dmidecode.if > index d9f6ff2..4bf435c 100644 > --- a/policy/modules/admin/dmidecode.if > +++ b/policy/modules/admin/dmidecode.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -30,7 +30,7 @@ interface(`dmidecode_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/dpkg.if b/policy/modules/admin/dpkg.if > index 633495b..9317171 100644 > --- a/policy/modules/admin/dpkg.if > +++ b/policy/modules/admin/dpkg.if > @@ -8,7 +8,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -28,7 +28,7 @@ interface(`dpkg_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -50,7 +50,7 @@ interface(`dpkg_domtrans_script',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/firstboot.if b/policy/modules/admin/firstboot.if > index b65ebdb..8fa451c 100644 > --- a/policy/modules/admin/firstboot.if > +++ b/policy/modules/admin/firstboot.if > @@ -9,7 +9,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -28,7 +28,7 @@ interface(`firstboot_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/kismet.if b/policy/modules/admin/kismet.if > index 52f2545..c18c920 100644 > --- a/policy/modules/admin/kismet.if > +++ b/policy/modules/admin/kismet.if > @@ -26,7 +26,7 @@ interface(`kismet_domtrans',` > ## > ## > ## > -## Domain allowed access > +## Domain allowed to transition. > ## > ## > ## > @@ -188,7 +188,7 @@ interface(`kismet_read_log',` > ## > ## > ## > -## Domain allowed to transition. > +## Domain allowed access. > ## > ## > # > @@ -207,7 +207,7 @@ interface(`kismet_append_log',` > ## > ## > ## > -## Domain to not audit. > +## Domain allowed access. > ## > ## > # > diff --git a/policy/modules/admin/kudzu.if b/policy/modules/admin/kudzu.if > index 585cd64..65bcaff 100644 > --- a/policy/modules/admin/kudzu.if > +++ b/policy/modules/admin/kudzu.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`kudzu_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/logrotate.if b/policy/modules/admin/logrotate.if > index fa1c236..6672183 100644 > --- a/policy/modules/admin/logrotate.if > +++ b/policy/modules/admin/logrotate.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`logrotate_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/netutils.if b/policy/modules/admin/netutils.if > index 0bd526e..a005782 100644 > --- a/policy/modules/admin/netutils.if > +++ b/policy/modules/admin/netutils.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`netutils_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -86,7 +86,7 @@ interface(`netutils_signal',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -141,7 +141,7 @@ interface(`netutils_signal_ping',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -167,7 +167,7 @@ interface(`netutils_run_ping',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -214,7 +214,7 @@ interface(`netutils_exec_ping',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -233,7 +233,7 @@ interface(`netutils_domtrans_traceroute',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -259,7 +259,7 @@ interface(`netutils_run_traceroute',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/portage.if b/policy/modules/admin/portage.if > index 35161b2..8aaa46d 100644 > --- a/policy/modules/admin/portage.if > +++ b/policy/modules/admin/portage.if > @@ -9,7 +9,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -32,7 +32,7 @@ interface(`portage_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -203,7 +203,7 @@ interface(`portage_compile_domain',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -225,7 +225,7 @@ interface(`portage_domtrans_gcc_config',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -251,7 +251,7 @@ interface(`portage_run_gcc_config',` > ## > ## > ## > -## Domain allowed access. > +## Domain to not audit. > ## > ## > # > @@ -270,7 +270,7 @@ interface(`portage_dontaudit_search_tmp',` > ## > ## > ## > -## Domain allowed access. > +## Domain to not audit. > ## > ## > # > diff --git a/policy/modules/admin/prelink.if b/policy/modules/admin/prelink.if > index 89e8209..93ec175 100644 > --- a/policy/modules/admin/prelink.if > +++ b/policy/modules/admin/prelink.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -49,7 +49,7 @@ interface(`prelink_exec',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/quota.if b/policy/modules/admin/quota.if > index fd8568e..6382d3c 100644 > --- a/policy/modules/admin/quota.if > +++ b/policy/modules/admin/quota.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`quota_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -70,7 +70,7 @@ interface(`quota_dontaudit_getattr_db',` > ## > ## > ## > -## Domain to not audit. > +## Domain allowed access. > ## > ## > # > diff --git a/policy/modules/admin/rpm.if b/policy/modules/admin/rpm.if > index 2514ed5..86463e3 100644 > --- a/policy/modules/admin/rpm.if > +++ b/policy/modules/admin/rpm.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -26,7 +26,7 @@ interface(`rpm_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -47,7 +47,7 @@ interface(`rpm_debuginfo_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -69,7 +69,7 @@ interface(`rpm_domtrans_script',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -211,7 +211,7 @@ interface(`rpm_dbus_chat',` > ## > ## > ## > -## Domain allowed access. > +## Domain to not audit. > ## > ## > # > diff --git a/policy/modules/admin/shutdown.if b/policy/modules/admin/shutdown.if > index d26bad6..d2c068d 100644 > --- a/policy/modules/admin/shutdown.if > +++ b/policy/modules/admin/shutdown.if > @@ -30,7 +30,7 @@ interface(`shutdown_domtrans',` > ## > ## > ## > -## Domain allowed access > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/tripwire.if b/policy/modules/admin/tripwire.if > index f623209..27abd88 100644 > --- a/policy/modules/admin/tripwire.if > +++ b/policy/modules/admin/tripwire.if > @@ -19,7 +19,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -38,7 +38,7 @@ interface(`tripwire_domtrans_tripwire',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -63,7 +63,7 @@ interface(`tripwire_run_tripwire',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -82,7 +82,7 @@ interface(`tripwire_domtrans_twadmin',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -107,7 +107,7 @@ interface(`tripwire_run_twadmin',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -126,7 +126,7 @@ interface(`tripwire_domtrans_twprint',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -151,7 +151,7 @@ interface(`tripwire_run_twprint',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -170,7 +170,7 @@ interface(`tripwire_domtrans_siggen',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/tzdata.if b/policy/modules/admin/tzdata.if > index b873388..7747b16 100644 > --- a/policy/modules/admin/tzdata.if > +++ b/policy/modules/admin/tzdata.if > @@ -24,7 +24,7 @@ interface(`tzdata_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/updfstab.if b/policy/modules/admin/updfstab.if > index 6a4f564..4d4b60e 100644 > --- a/policy/modules/admin/updfstab.if > +++ b/policy/modules/admin/updfstab.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > diff --git a/policy/modules/admin/usbmodules.if b/policy/modules/admin/usbmodules.if > index eba81e2..b7eade3 100644 > --- a/policy/modules/admin/usbmodules.if > +++ b/policy/modules/admin/usbmodules.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -26,7 +26,7 @@ interface(`usbmodules_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/usermanage.if b/policy/modules/admin/usermanage.if > index dd6ab1b..b56c212 100644 > --- a/policy/modules/admin/usermanage.if > +++ b/policy/modules/admin/usermanage.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -31,7 +31,7 @@ interface(`usermanage_domtrans_chfn',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -55,7 +55,7 @@ interface(`usermanage_run_chfn',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -80,7 +80,7 @@ interface(`usermanage_domtrans_groupadd',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -109,7 +109,7 @@ interface(`usermanage_run_groupadd',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -133,7 +133,7 @@ interface(`usermanage_domtrans_passwd',` > ## > ## > ## > -## Domain allowed access. > +## Domain to not audit. > ## > ## > # > @@ -152,7 +152,7 @@ interface(`usermanage_kill_passwd',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -178,7 +178,7 @@ interface(`usermanage_run_passwd',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -200,7 +200,7 @@ interface(`usermanage_domtrans_admin_passwd',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > @@ -247,7 +247,7 @@ interface(`usermanage_dontaudit_use_useradd_fds',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -272,7 +272,7 @@ interface(`usermanage_domtrans_useradd',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/vbetool.if b/policy/modules/admin/vbetool.if > index 273d01d..f46ab17 100644 > --- a/policy/modules/admin/vbetool.if > +++ b/policy/modules/admin/vbetool.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -26,7 +26,7 @@ interface(`vbetool_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > diff --git a/policy/modules/admin/vpn.if b/policy/modules/admin/vpn.if > index 7ed042a..64f8cdc 100644 > --- a/policy/modules/admin/vpn.if > +++ b/policy/modules/admin/vpn.if > @@ -6,7 +6,7 @@ > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > # > @@ -25,7 +25,7 @@ interface(`vpn_domtrans',` > ## > ## > ## > -## Domain allowed access. > +## Domain allowed to transition. > ## > ## > ## > > > > _______________________________________________ > refpolicy mailing list > refpolicy at oss.tresys.com > http://oss.tresys.com/mailman/listinfo/refpolicy -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com