From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Mon, 11 Oct 2010 09:37:26 -0400 Subject: [refpolicy] [ patch 1/1] su: redundant, init_dontaudit_use_script_ptys($1_su_t) In-Reply-To: <20101008135705.GA7305@localhost.localdomain> References: <20101008135705.GA7305@localhost.localdomain> Message-ID: <4CB31316.6080502@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 10/08/10 09:57, Dominick Grift wrote: > Signed-off-by: Dominick Grift > --- > :100644 100644 a0aa8c5... 28a4e3d... M policy/modules/admin/su.if > policy/modules/admin/su.if | 5 ----- > 1 files changed, 0 insertions(+), 5 deletions(-) > > diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if > index a0aa8c5..28a4e3d 100644 > --- a/policy/modules/admin/su.if > +++ b/policy/modules/admin/su.if > @@ -135,11 +135,6 @@ template(`su_restricted_domain_template', ` > # used when the password has expired > usermanage_read_crack_db($1_su_t) > ') > - > - ifdef(`TODO',` > - # Caused by su - init scripts > - dontaudit $1_su_t initrc_devpts_t:chr_file { getattr ioctl }; > - ') dnl end TODO > ') > > ####################################### Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com