From 386542e6d50eeaa68aa91f821c0725ddd0ab9b2a Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Tue, 18 May 2021 12:23:15 +0200 Subject: [PATCH] selinux: Fix issues reported by SELint Style guide [1] issues only. No impact on policy functionality. [1] - https://github.com/TresysTechnology/refpolicy/wiki/StyleGuide --- unix/vncserver/selinux/vncsession.te | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/unix/vncserver/selinux/vncsession.te b/unix/vncserver/selinux/vncsession.te index a773fed3..63ad8a85 100644 --- a/unix/vncserver/selinux/vncsession.te +++ b/unix/vncserver/selinux/vncsession.te @@ -17,7 +17,7 @@ # USA. # -policy_module(vncsession, 1.0.0); +policy_module(vncsession, 1.0.0) gen_require(` attribute userdomain; @@ -42,8 +42,8 @@ can_exec(vnc_session_t, vnc_session_exec_t) userdom_spec_domtrans_all_users(vnc_session_t) userdom_signal_all_users(vnc_session_t) -allow vnc_session_t self:capability { kill chown dac_override dac_read_search fowner setgid setuid sys_resource }; -allow vnc_session_t self:process { getcap setsched setexec setrlimit }; +allow vnc_session_t self:capability { chown dac_override dac_read_search fowner kill setgid setuid sys_resource }; +allow vnc_session_t self:process { getcap setexec setrlimit setsched }; allow vnc_session_t self:fifo_file rw_fifo_file_perms; manage_files_pattern(vnc_session_t, xdm_home_t, xdm_home_t) @@ -65,4 +65,3 @@ logging_append_all_logs(vnc_session_t) mcs_process_set_categories(vnc_session_t) mcs_killall(vnc_session_t) - -- 2.39.5