From 0a119a01427cf94c15f07bb30ccec40d500a8baa Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Nov 24 2009 14:41:03 +0000 Subject: Setrans patch from Dan Walsh. --- diff --git a/policy/modules/system/setrans.if b/policy/modules/system/setrans.if index dea7f55..8de660e 100644 --- a/policy/modules/system/setrans.if +++ b/policy/modules/system/setrans.if @@ -1,5 +1,24 @@ ## SELinux MLS/MCS label translation service. +######################################## +## +## Execute setrans server in the setrans domain. +## +## +## +## The type of the process performing this action. +## +## +# +# +interface(`setrans_initrc_domtrans',` + gen_require(` + type setrans_initrc_exec_t; + ') + + init_labeled_script_domtrans($1, setrans_initrc_exec_t) +') + ####################################### ## ## Allow a domain to translate contexts. diff --git a/policy/modules/system/setrans.te b/policy/modules/system/setrans.te index a34ab14..98ffab7 100644 --- a/policy/modules/system/setrans.te +++ b/policy/modules/system/setrans.te @@ -1,5 +1,5 @@ -policy_module(setrans, 1.6.0) +policy_module(setrans, 1.6.1) gen_require(` class context contains;