diff options
| author | Maciej Borzecki <maciej.zenon.borzecki@canonical.com> | 2019-04-16 10:36:19 +0200 |
|---|---|---|
| committer | Maciej Borzecki <maciej.zenon.borzecki@canonical.com> | 2019-04-16 11:11:36 +0200 |
| commit | b418364ea9d6756869543cec6332cadf104e57f4 (patch) | |
| tree | 58f172f5db4fab07d04c1611d43fb497024e02ea /data | |
| parent | 6fa4f73fda4b0045009bcbb3a492f7d9e0df639a (diff) | |
data/selinux: remove unnecessary semicolons
Semicolons are not necessary when using interfaces. Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Diffstat (limited to 'data')
| -rw-r--r-- | data/selinux/snappy.te | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/data/selinux/snappy.te b/data/selinux/snappy.te index 42550b024c..fce07fcee0 100644 --- a/data/selinux/snappy.te +++ b/data/selinux/snappy.te @@ -228,14 +228,14 @@ allow snappy_t usr_t:lnk_file { create unlink }; ssh_exec_keygen(snappy_t) # Allow snapd to access passwd file for lookup -auth_read_passwd(snappy_t); +auth_read_passwd(snappy_t) # because /run/snapd/ns/*.mnt gets a label of the process context gen_require(` type unconfined_t; ') allow snappy_t unconfined_t:file getattr; allow snappy_t snappy_confine_t:file getattr; -logging_send_syslog_msg(snappy_t); +logging_send_syslog_msg(snappy_t) allow snappy_t self:capability { dac_read_search dac_override fowner }; allow snappy_t self:process { setpgid }; @@ -522,7 +522,7 @@ allow snappy_cli_t snappy_var_lib_t:file { read_file_perms }; allow snappy_cli_t snappy_var_lib_t:lnk_file { read_lnk_file_perms }; # allow reading passwd -auth_read_passwd(snappy_cli_t); +auth_read_passwd(snappy_cli_t) # allow reading sssd files optional_policy(` sssd_read_public_files(snappy_cli_t) |