From: jwcart2@tycho.nsa.gov (James Carter) Date: Tue, 24 Aug 2010 15:50:43 -0400 Subject: [refpolicy] [m4-isms patch 3/6] Add role rule to make translation easier Message-ID: <1282679443.14992.33.camel@moss-lions.epoch.ncsc.mil> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com By adding this rule, I can assume that every role rule of the form "role foo_r;" is a declaration and those of the form "role foo_r types bar_t;" are adding types to an existing role. This makes translating to a different language easier. --- policy/modules/services/nx.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/nx.te b/policy/modules/services/nx.te index ebb9582..a3559f2 100644 --- a/policy/modules/services/nx.te +++ b/policy/modules/services/nx.te @@ -12,6 +12,7 @@ domain_entry_file(nx_server_t, nx_server_exec_t) domain_user_exemption_target(nx_server_t) # we need an extra role because nxserver is called from sshd # cjp: do we really need this? +role nx_server_r; role nx_server_r types nx_server_t; allow system_r nx_server_r; -- James Carter National Security Agency