From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Sat, 13 Aug 2011 21:01:20 +0200 Subject: [refpolicy] [PATCH 1/1] HAL support is not mandatory for ConsoleKit Message-ID: <20110813190119.GA18989@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com The current consolekit policy definition has hal_ptrace(consolekit_t) in its main body. However, HAL support within consolekit is not mandatory. As such, this call should be within an optional_policy(). Signed-off-by: Sven Vermeulen --- policy/modules/services/consolekit.te | 6 ++++-- 1 files changed, 4 insertions(+), 2 deletions(-) diff --git a/policy/modules/services/consolekit.te b/policy/modules/services/consolekit.te index dd71359..46cd222 100644 --- a/policy/modules/services/consolekit.te +++ b/policy/modules/services/consolekit.te @@ -72,8 +72,6 @@ miscfiles_read_localization(consolekit_t) userdom_dontaudit_read_user_home_content_files(consolekit_t) userdom_read_user_tmp_files(consolekit_t) -hal_ptrace(consolekit_t) - tunable_policy(`use_nfs_home_dirs',` fs_read_nfs_files(consolekit_t) ') @@ -99,6 +97,10 @@ optional_policy(` ') optional_policy(` + hal_ptrace(consolekit_t) +') + +optional_policy(` policykit_dbus_chat(consolekit_t) policykit_domtrans_auth(consolekit_t) policykit_read_lib(consolekit_t) -- 1.7.3.4