[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

[Jason Zaman]

commit:     62f241df91ddddeee30ef0d5c18d498f8641f9f0
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Sun May 24 12:05:48 2015 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Wed May 27 19:01:31 2015 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=62f241df

salt: use init_startstop_service interface in _admin

The salt_admin interfaces had rules for RedHat sysvinit. This
replaces them with the interface init_startstop_service which can
easily be changed for other init systems.

 policy/modules/contrib/salt.if | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/policy/modules/contrib/salt.if b/policy/modules/contrib/salt.if
index 7ab9e6b..27fefae 100644
--- a/policy/modules/contrib/salt.if
+++ b/policy/modules/contrib/salt.if
@@ -29,9 +29,7 @@ interface(`salt_admin_master',`
        allow $1 salt_master_t:process { ptrace signal_perms };
        ps_process_pattern($1, salt_master_t)
 
-       init_labeled_script_domtrans($1, salt_master_initrc_exec_t)
-       domain_system_change_exemption($1)
-       role_transition $2 salt_master_initrc_exec_t system_r;
+       init_startstop_service($1, $2, salt_master_t, salt_master_initrc_exec_t)
 
        # for debugging?
        role_transition $2 salt_master_exec_t system_r;
@@ -73,9 +71,7 @@ interface(`salt_admin_minion',`
        allow $1 salt_minion_t:process { ptrace signal_perms };
        ps_process_pattern($1, salt_minion_t)
 
-       init_labeled_script_domtrans($1, salt_minion_initrc_exec_t)
-       domain_system_change_exemption($1)
-       role_transition $2 salt_minion_initrc_exec_t system_r;
+       init_startstop_service($1, $2, salt_minion_t, salt_minion_initrc_exec_t)
 
        # for debugging
        role_transition $2 salt_minion_exec_t system_r;