Add unconfined_domain(flatpak_helper_t) to optional_policy block

Fixed bug where disabling unconfined module fails because macro unconfined_domain(flatpak_helper_t) wasn't in optional_policy block
flatpak · Jun 5, 2020 · 669a5bf · 669a5bf
1 parent b042abc
commit 669a5bf
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/selinux/flatpak.te b/selinux/flatpak.te
@@ -12,8 +12,6 @@ type flatpak_helper_t;
 type flatpak_helper_exec_t;
 init_daemon_domain(flatpak_helper_t, flatpak_helper_exec_t)
 
-unconfined_domain(flatpak_helper_t)
-
 optional_policy(`
     dbus_stub()
     dbus_system_domain(flatpak_helper_t, flatpak_helper_exec_t)
@@ -25,3 +23,7 @@ optional_policy(`
 optional_policy(`
    policykit_dbus_chat(flatpak_helper_t)
 ')
+
+optional_policy(`                   
+    unconfined_domain(flatpak_helper_t)
+')