[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

["Sven Vermeulen" <swift@gentoo.org>]

commit:     343c6e0f96645d89fd64ec5f6434dc792a887b02
Author:     Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Mon May 15 22:27:04 2017 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Thu May 18 17:01:59 2017 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=343c6e0f

openoffice: Move ooffice_rw_tmp_files() implementation.

 policy/modules/contrib/openoffice.if | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/policy/modules/contrib/openoffice.if b/policy/modules/contrib/openoffice.if
index 5a579e08..19f62381 100644
--- a/policy/modules/contrib/openoffice.if
+++ b/policy/modules/contrib/openoffice.if
@@ -51,38 +51,38 @@ interface(`ooffice_domtrans',`
 
 ########################################
 ## <summary>
-##	Read and write temporary
-##	openoffice files.
+##	Do not audit attempts to execute
+##	files in temporary directories.
 ## </summary>
 ## <param name="domain">
 ##	<summary>
-##	Domain allowed access.
+##	Domain to not audit.
 ##	</summary>
 ## </param>
 #
-interface(`ooffice_rw_tmp_files',`
+interface(`ooffice_dontaudit_exec_tmp_files',`
 	gen_require(`
 		type ooffice_tmp_t;
 	')
 
-	rw_files_pattern($1, ooffice_tmp_t, ooffice_tmp_t)
+	dontaudit $1 ooffice_tmp_t:file exec_file_perms;
 ')
 
 ########################################
 ## <summary>
-##	Do not audit attempts to execute
-##	files in temporary directories.
+##	Read and write temporary
+##	openoffice files.
 ## </summary>
 ## <param name="domain">
 ##	<summary>
-##	Domain to not audit.
+##	Domain allowed access.
 ##	</summary>
 ## </param>
 #
-interface(`ooffice_dontaudit_exec_tmp_files',`
+interface(`ooffice_rw_tmp_files',`
 	gen_require(`
 		type ooffice_tmp_t;
 	')
 
-	dontaudit $1 ooffice_tmp_t:file exec_file_perms;
+	rw_files_pattern($1, ooffice_tmp_t, ooffice_tmp_t)
 ')