commit: 482dc188fa0709641e76778f2c22f0b248cb4f82
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Fri Aug 22 19:12:15 2014 +0000
Commit: Jason Zaman <gentoo <AT> perfinion <DOT> com>
CommitDate: Fri Aug 22 19:12:15 2014 +0000
URL:
http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=482dc188
It is a template, so use _t (compile issue otherwise)
---
policy/modules/system/userdomain.if | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/system/userdomain.if
b/policy/modules/system/userdomain.if
index 78cb3ad..08139d9 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1246,7 +1246,7 @@ template(`userdom_admin_user_template',`
# Grant block_suspend capability2 to administrators, this
annoys the heck out of me
allow $1_t self:capability2 { block_suspend };
# Allow admins to interact with kernel, for instance using
lsusb command
- allow $1 self:netlink_kobject_uevent_socket create_socket_perms;
+ allow $1_t self:netlink_kobject_uevent_socket
create_socket_perms;
# Moved out of files_relabel_non_auth_files as it cannot be
used in tunable_policy otherwise
seutil_relabelto_bin_policy($1_t)
')
