From: domg472@gmail.com (Dominick Grift) Date: Fri, 10 Sep 2010 18:21:54 +0200 Subject: [refpolicy] [oident patch 1/1] Access for confined users to oidentd user home content is unconditional. Message-ID: <20100910162151.GA25472@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- :100644 100644 0c9876c... 3fed14e... M policy/modules/roles/staff.te :100644 100644 e8a507d... 93b9f7f... M policy/modules/roles/unprivuser.te policy/modules/roles/staff.te | 9 +++++---- policy/modules/roles/unprivuser.te | 10 +++++----- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/policy/modules/roles/staff.te b/policy/modules/roles/staff.te index 0c9876c..3fed14e 100644 --- a/policy/modules/roles/staff.te +++ b/policy/modules/roles/staff.te @@ -27,6 +27,11 @@ optional_policy(` ') optional_policy(` + oident_manage_user_content(staff_t) + oident_relabel_user_content(staff_t) +') + +optional_policy(` postgresql_role(staff_r, staff_t) ') @@ -121,10 +126,6 @@ ifndef(`distro_redhat',` ') optional_policy(` - oident_manage_user_content(staff_t) - oident_relabel_user_content(staff_t) - ') - optional_policy(` pyzor_role(staff_r, staff_t) ') diff --git a/policy/modules/roles/unprivuser.te b/policy/modules/roles/unprivuser.te index e8a507d..93b9f7f 100644 --- a/policy/modules/roles/unprivuser.te +++ b/policy/modules/roles/unprivuser.te @@ -17,6 +17,11 @@ optional_policy(` ') optional_policy(` + oident_manage_user_content(user_t) + oident_relabel_user_content(user_t) +') + +optional_policy(` screen_role_template(user, user_r, user_t) ') @@ -94,11 +99,6 @@ ifndef(`distro_redhat',` ') optional_policy(` - oident_manage_user_content(user_t) - oident_relabel_user_content(user_t) - ') - - optional_policy(` postgresql_role(user_r, user_t) ') -- 1.7.2.1 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100910/a95d59c8/attachment-0001.bin