From 88eb5b40ad72b7d0cd7a979e3d192039889d3302 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: May 31 2013 21:24:35 +0000
Subject: Add gssproxy policy


---

diff --git a/modules-mls-contrib.conf b/modules-mls-contrib.conf
index 1784416..641813a 100644
--- a/modules-mls-contrib.conf
+++ b/modules-mls-contrib.conf
@@ -572,6 +572,13 @@ gpm = module
 # 
 gpsd = module
 
+# Module: gssproxy
+#
+#  A proxy for GSSAPI credential handling
+#
+# 
+gssproxy = module
+
 # Layer: role
 # Module: guest
 #
diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf
index e88980a..a0ed9aa 100644
--- a/modules-targeted-contrib.conf
+++ b/modules-targeted-contrib.conf
@@ -741,6 +741,13 @@ gpm = module
 # 
 gpsd = module
 
+# Module: gssproxy
+#
+#  A proxy for GSSAPI credential handling
+#
+# 
+gssproxy = module
+
 # Layer: role
 # Module: guest
 #
diff --git a/permissivedomains.te b/permissivedomains.te
index 925fc39..e44d83e 100644
--- a/permissivedomains.te
+++ b/permissivedomains.te
@@ -1,50 +1,9 @@
-policy_module(permissivedomains,19)
+policy_module(permissivedomains,20)
 
 optional_policy(`
     gen_require(`
-                type systemd_localed_t;
+                type gssproxy_t;
         ')
 
-        permissive systemd_localed_t;
+        permissive gssproxy_t;
 ')
-
-optional_policy(`
-    gen_require(`
-                type httpd_mythtv_script_t;
-        ')
-
-        permissive httpd_mythtv_script_t;
-')
-
-optional_policy(`
-    gen_require(`
-                type systemd_hostnamed_t;
-        ')
-
-	permissive systemd_hostnamed_t;
-')
-
-optional_policy(`
-    gen_require(`
-                type systemd_sysctl_t;
-        ')
-
-        permissive systemd_sysctl_t;
-')
-
-optional_policy(`
-    gen_require(`
-                type openshift_cron_t;
-        ')
-
-        permissive openshift_cron_t;
-')
-
-optional_policy(`
-    gen_require(`
-                type swift_t;
-        ')
-
-        permissive swift_t;
-')
-