diff --git a/refpolicy/policy/modules/admin/rpm.te b/refpolicy/policy/modules/admin/rpm.te index c1a39c5..4ccf1bd 100644 --- a/refpolicy/policy/modules/admin/rpm.te +++ b/refpolicy/policy/modules/admin/rpm.te @@ -6,7 +6,12 @@ policy_module(rpm,1.0) # Declarations # -type rpm_t; +ifdef(`targeted_policy',` + unconfined_alias_domain(rpm_t) +',` + type rpm_t; +') + type rpm_exec_t; init_system_domain(rpm_t,rpm_exec_t) domain_obj_id_change_exempt(rpm_t) @@ -321,7 +326,7 @@ ifdef(`distro_redhat',` ') ifdef(`targeted_policy',` - unconfined_domain_template(rpm_t) + unconfined_domain_template(rpm_script_t) ') tunable_policy(`allow_execmem',`