[gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/services/, policy/modules/system/

[Jason Zaman]

commit:     e7ea088cb1e9effd2615a741f7e60892b5cf4ebb
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Mon May 11 22:49:13 2015 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon May 11 22:54:51 2015 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e7ea088c

remove init script transitions from non-contrib _admin interfaces

 policy/modules/services/postgresql.if |  8 ++++----
 policy/modules/system/logging.if      | 16 ++++++++--------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/policy/modules/services/postgresql.if 
b/policy/modules/services/postgresql.if
index 85d430f..a757015 100644
--- a/policy/modules/services/postgresql.if
+++ b/policy/modules/services/postgresql.if
@@ -595,10 +595,10 @@ interface(`postgresql_admin',`
        allow $1 postgresql_t:process { ptrace signal_perms };
        ps_process_pattern($1, postgresql_t)
 
-       init_labeled_script_domtrans($1, postgresql_initrc_exec_t)
-       domain_system_change_exemption($1)
-       role_transition $2 postgresql_initrc_exec_t system_r;
-       allow $2 system_r;
+       #init_labeled_script_domtrans($1, postgresql_initrc_exec_t)
+       #domain_system_change_exemption($1)
+       #role_transition $2 postgresql_initrc_exec_t system_r;
+       #allow $2 system_r;
 
        admin_pattern($1, postgresql_var_run_t)
 

diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if
index 1c4af7b..14dd2cb 100644
--- a/policy/modules/system/logging.if
+++ b/policy/modules/system/logging.if
@@ -1022,10 +1022,10 @@ interface(`logging_admin_audit',`
 
        logging_run_auditctl($1, $2)
 
-       init_labeled_script_domtrans($1, auditd_initrc_exec_t)
-       domain_system_change_exemption($1)
-       role_transition $2 auditd_initrc_exec_t system_r;
-       allow $2 system_r;
+       #init_labeled_script_domtrans($1, auditd_initrc_exec_t)
+       #domain_system_change_exemption($1)
+       #role_transition $2 auditd_initrc_exec_t system_r;
+       #allow $2 system_r;
 ')
 
 ########################################
@@ -1080,10 +1080,10 @@ interface(`logging_admin_syslog',`
 
        logging_manage_all_logs($1)
 
-       init_labeled_script_domtrans($1, syslogd_initrc_exec_t)
-       domain_system_change_exemption($1)
-       role_transition $2 syslogd_initrc_exec_t system_r;
-       allow $2 system_r;
+       #init_labeled_script_domtrans($1, syslogd_initrc_exec_t)
+       #domain_system_change_exemption($1)
+       #role_transition $2 syslogd_initrc_exec_t system_r;
+       #allow $2 system_r;
 ')
 
 ########################################