diff --git a/refpolicy/policy/modules/kernel/filesystem.if b/refpolicy/policy/modules/kernel/filesystem.if index a9bb42f..cd29096 100644 --- a/refpolicy/policy/modules/kernel/filesystem.if +++ b/refpolicy/policy/modules/kernel/filesystem.if @@ -415,7 +415,7 @@ interface(`fs_unmount_cifs',` class filesystem unmount; ') - allow $1 cifs_t:filesystem mount; + allow $1 cifs_t:filesystem unmount; ') ######################################## diff --git a/refpolicy/policy/modules/system/files.if b/refpolicy/policy/modules/system/files.if index d21f063..0d1e406 100644 --- a/refpolicy/policy/modules/system/files.if +++ b/refpolicy/policy/modules/system/files.if @@ -952,7 +952,7 @@ interface(`files_dontaudit_read_etc_runtime_files',` class file { getattr read }; ') - allow $1 etc_runtime_t:file { getattr read }; + dontaudit $1 etc_runtime_t:file { getattr read }; ') ########################################