From b675cec7f8bb358a66a175e0e73bb71d170093a9 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Mar 03 2010 19:16:22 +0000
Subject: Improve documentation of seutil_sigchld_newrole().


---

diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if
index d01cffc..d37974c 100644
--- a/policy/modules/system/selinuxutil.if
+++ b/policy/modules/system/selinuxutil.if
@@ -244,11 +244,21 @@ interface(`seutil_dontaudit_signal_newrole',`
 ## <summary>
 ##	Send a SIGCHLD signal to newrole.
 ## </summary>
+## <desc>
+##	<p>
+##	Allow the specified domain to send a SIGCHLD
+##	signal to newrole.  This signal is automatically
+##	sent from a process that is terminating to
+##	its parent.  This may be needed by domains
+##	that are executed from newrole.
+##	</p>
+## </desc>
 ## <param name="domain">
 ##	<summary>
 ##	Domain allowed access.
 ##	</summary>
 ## </param>
+## <infoflow type="write" weight="1"/>
 #
 interface(`seutil_sigchld_newrole',`
 	gen_require(`