From 23d5ab8de738c8fe2bf6159c769e644641a3ad26 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Nov 14 2008 13:17:51 +0000
Subject: trunk: fix disable ubac condition for process perms.


---

diff --git a/policy/constraints b/policy/constraints
index bf4a736..47ada8d 100644
--- a/policy/constraints
+++ b/policy/constraints
@@ -79,11 +79,13 @@ constrain dir_file_class_set { create relabelto relabelfrom }
 # Process rules
 #
 
-constrain process { sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setrlimit }
-(
-	basic_ubac_conditions
-	or t1 == ubacproc
-);
+ifdef(`enable_ubac',`
+	constrain process { sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setrlimit }
+	(
+		basic_ubac_conditions
+		or t1 == ubacproc
+	);
+')
 
 constrain process { transition noatsecure siginh rlimitinh }
 (