diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te index 4df9ad3..d43bca7 100644 --- a/refpolicy/policy/modules/system/init.te +++ b/refpolicy/policy/modules/system/init.te @@ -275,6 +275,11 @@ logging_modify_system_logs(initrc_t) logging_read_all_logs(initrc_t) logging_append_all_logs(initrc_t) +optional_policy(`authlogin.te',` +authlogin_pam_read_runtime_data(initrc_t) +authlogin_pam_remove_runtime_data(initrc_t) +') + optional_policy(`consoletype.te',` consoletype_transition(initrc_t) ') @@ -284,6 +289,10 @@ modutils_depmod_transition(initrc_t) modutils_update_modules_transition(initrc_t) ') +optional_policy(`sysnetwork.te',` +sysnetwork_ifconfig_transition(initrc_t) +') + tunable_policy(`distro_redhat',` kernel_set_selinux_enforcement_mode(initrc_t) @@ -292,12 +301,7 @@ files_create_boot_flag(initrc_t) # Create and read /boot/kernel.h and /boot/System.map. # Redhat systems typically create this file at boot time. bootloader_create_runtime_data(initrc_t) -') - -optional_policy(`authlogin.te',` -authlogin_pam_read_runtime_data(initrc_t) -authlogin_pam_remove_runtime_data(initrc_t) -') +') dnl end distro_redhat ifdef(`TODO',` # Mount and unmount file systems.