From a99f69fd0e5f9dae0419d6387539ac3d750c4cd7 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Jun 18 2010 19:12:33 +0000
Subject: Loadkeys patch from Dan Walsh.


Dontaudit leaked sockets

---

diff --git a/policy/modules/apps/loadkeys.if b/policy/modules/apps/loadkeys.if
index c56cfa4..215a7d3 100644
--- a/policy/modules/apps/loadkeys.if
+++ b/policy/modules/apps/loadkeys.if
@@ -17,6 +17,10 @@ interface(`loadkeys_domtrans',`
 
 	corecmd_search_bin($1)
 	domtrans_pattern($1, loadkeys_exec_t, loadkeys_t)
+
+	ifdef(`hide_broken_symptoms',`
+		dontaudit loadkeys_t $1:socket_class_set { read write };
+	')
 ')
 
 ########################################
diff --git a/policy/modules/apps/loadkeys.te b/policy/modules/apps/loadkeys.te
index 7f2eee0..a076ebb 100644
--- a/policy/modules/apps/loadkeys.te
+++ b/policy/modules/apps/loadkeys.te
@@ -1,4 +1,4 @@
-policy_module(loadkeys, 1.7.0)
+policy_module(loadkeys, 1.7.1)
 
 ########################################
 #