commit: 83621cff0136e3a63561b364715fa636cd8ccdb1
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Wed Apr 25 21:33:51 2018 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Fri Jun 8 09:21:01 2018 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=83621cff
sysnetwork: Move lines in sysnet_read_config().
policy/modules/system/sysnetwork.if | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/policy/modules/system/sysnetwork.if
b/policy/modules/system/sysnetwork.if
index 693a26c6..f4f17a5d 100644
--- a/policy/modules/system/sysnetwork.if
+++ b/policy/modules/system/sysnetwork.if
@@ -348,10 +348,6 @@ interface(`sysnet_read_config',`
files_search_etc($1)
allow $1 net_conf_t:file read_file_perms;
- ifdef(`init_systemd',`
- systemd_read_resolved_runtime($1)
- ')
-
ifdef(`distro_debian',`
files_search_pids($1)
allow $1 net_conf_t:dir list_dir_perms;
@@ -362,6 +358,10 @@ interface(`sysnet_read_config',`
allow $1 net_conf_t:dir list_dir_perms;
read_files_pattern($1, net_conf_t, net_conf_t)
')
+
+ ifdef(`init_systemd',`
+ systemd_read_resolved_runtime($1)
+ ')
')
#######################################