[node-patches] Change in ovirt-node[master]: selinux: Make mandb_t optional

[fabiand at fedoraproject.org]

Fabian Deutsch has uploaded a new change for review.

Change subject: selinux: Make mandb_t optional
......................................................................

selinux: Make mandb_t optional

… otherwise it won't work on el6

Change-Id: Ic7a81ec639dde0c7199d31ce81b9b0090c4d956b
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M semodule/ovirt.te.in
1 file changed, 6 insertions(+), 5 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/32/29332/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index d747b89..5947f6e 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -363,11 +363,12 @@
 
 
 #============= mandb_t ==============
-require {
-    type mandb_t;
-}
-allow mandb_t admin_home_t:dir search;
-
+optional_policy(`
+    require {
+        type mandb_t;
+    }
+    allow mandb_t admin_home_t:dir search;
+')
 
 
 


-- 
To view, visit http://gerrit.ovirt.org/29332
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic7a81ec639dde0c7199d31ce81b9b0090c4d956b
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Fabian Deutsch <fabiand at fedoraproject.org>
Gerrit-Reviewer: Fabian Deutsch <fabiand at fedoraproject.org>