Gentoo Archives: gentoo-commits

From: Sven Vermeulen <swift@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Fri, 06 Dec 2013 17:48:16
Message-Id: 1386352012.f7ac53bc7bf3d18bc929e9e1d19b11b692f948a8.swift@gentoo
1 commit: f7ac53bc7bf3d18bc929e9e1d19b11b692f948a8
2 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
3 AuthorDate: Fri Dec 6 17:46:52 2013 +0000
4 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
5 CommitDate: Fri Dec 6 17:46:52 2013 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=f7ac53bc
7
8 Move gentoo specific to lower part
9
10 ---
11 policy/modules/system/unconfined.te | 27 +++++++++++++++------------
12 1 file changed, 15 insertions(+), 12 deletions(-)
13
14 diff --git a/policy/modules/system/unconfined.te b/policy/modules/system/unconfined.te
15 index 3dd0858..d6dcf37 100644
16 --- a/policy/modules/system/unconfined.te
17 +++ b/policy/modules/system/unconfined.te
18 @@ -72,10 +72,6 @@ optional_policy(`
19 ')
20
21 optional_policy(`
22 - chromium_role(unconfined_r, unconfined_t)
23 -')
24 -
25 -optional_policy(`
26 cron_unconfined_role(unconfined_r, unconfined_t)
27 ')
28
29 @@ -157,10 +153,6 @@ optional_policy(`
30 ')
31
32 optional_policy(`
33 - rtorrent_role(unconfined_r, unconfined_t)
34 -')
35 -
36 -optional_policy(`
37 samba_run_net(unconfined_t, unconfined_r)
38 samba_run_winbind_helper(unconfined_t, unconfined_r)
39 ')
40 @@ -198,10 +190,6 @@ optional_policy(`
41 wine_domtrans(unconfined_t)
42 ')
43
44 -optional_policy(`
45 - xserver_role(unconfined_r, unconfined_t)
46 -')
47 -
48 ########################################
49 #
50 # Unconfined Execmem Local policy
51 @@ -213,3 +201,18 @@ unconfined_domain_noaudit(unconfined_execmem_t)
52 optional_policy(`
53 unconfined_dbus_chat(unconfined_execmem_t)
54 ')
55 +
56 +ifdef(`distro_gentoo',`
57 +
58 + optional_policy(`
59 + chromium_role(unconfined_r, unconfined_t)
60 + ')
61 +
62 + optional_policy(`
63 + rtorrent_role(unconfined_r, unconfined_t)
64 + ')
65 +
66 + optional_policy(`
67 + xserver_role(unconfined_r, unconfined_t)
68 + ')
69 +')