diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te index 03c5756..9c6c69a 100644 --- a/policy/modules/system/selinuxutil.te +++ b/policy/modules/system/selinuxutil.te @@ -1,5 +1,5 @@ -policy_module(selinuxutil,1.7.3) +policy_module(selinuxutil,1.7.4) gen_require(` bool secure_mode; @@ -257,6 +257,7 @@ term_relabel_all_user_ptys(newrole_t) term_getattr_unallocated_ttys(newrole_t) term_dontaudit_use_unallocated_ttys(newrole_t) +auth_use_nsswitch(newrole_t) auth_domtrans_chk_passwd(newrole_t) auth_rw_faillog(newrole_t) @@ -290,14 +291,6 @@ tunable_policy(`allow_polyinstantiation',` files_polyinstantiate_all(newrole_t) ') -optional_policy(` - nis_use_ypbind(newrole_t) -') - -optional_policy(` - nscd_socket_use(newrole_t) -') - ######################################## # # Restorecond local policy @@ -380,6 +373,7 @@ selinux_compute_user_contexts(run_init_t) term_dontaudit_list_ptys(run_init_t) +auth_use_nsswitch(run_init_t) auth_domtrans_chk_passwd(run_init_t) auth_dontaudit_read_shadow(run_init_t) @@ -408,10 +402,6 @@ optional_policy(` daemontools_domtrans_start(run_init_t) ') -optional_policy(` - nscd_socket_use(run_init_t) -') - ######################################## # # semodule local policy