From: domg472@gmail.com (Dominick Grift) Date: Mon, 4 Oct 2010 20:23:43 +0200 Subject: [refpolicy] [ patch 31/44] su: do not audit attempts to search /root. In-Reply-To: <1286216636-28449-1-git-send-email-domg472@gmail.com> References: <1286216636-28449-1-git-send-email-domg472@gmail.com> Message-ID: <1286216636-28449-33-git-send-email-domg472@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- :100644 100644 a0aa8c5... 9337ed7... M policy/modules/admin/su.if policy/modules/admin/su.if | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if index a0aa8c5..9337ed7 100644 --- a/policy/modules/admin/su.if +++ b/policy/modules/admin/su.if @@ -223,6 +223,7 @@ template(`su_role_template',` files_read_etc_runtime_files($1_su_t) files_search_var_lib($1_su_t) files_dontaudit_getattr_tmp_dirs($1_su_t) + files_dontaudit_list_default($1_su_t) init_dontaudit_use_fds($1_su_t) # Write to utmp. -- 1.7.2.3