diff --git a/refpolicy/policy/modules/admin/kudzu.te b/refpolicy/policy/modules/admin/kudzu.te index 4e99ea1..31691cd 100644 --- a/refpolicy/policy/modules/admin/kudzu.te +++ b/refpolicy/policy/modules/admin/kudzu.te @@ -121,6 +121,13 @@ ifdef(`targeted_policy',` term_dontaudit_use_unallocated_tty(kudzu_t) term_dontaudit_use_generic_pty(kudzu_t) files_dontaudit_read_root_file(kudzu_t) + + # cjp: this was originally in the else block + # of ifdef userhelper.te, but it seems to + # make more sense here. also, require + # blocks curently do not work in the + # else block of optionals + unconfined_domain_template(kudzu_t) ') tunable_policy(`allow_execmem',`