selinux-setools/0003-Since-we-do-not-ship-neverallow-rules-all-always-fai.patch

   1 From 252b7c8bf311d615164a20f4f402767e5859d972 Mon Sep 17 00:00:00 2001
   2 From: Dan Walsh <dwalsh@redhat.com>
   3 Date: Tue, 20 Sep 2011 15:40:28 -0400
   4 Subject: [PATCH 3/6] Since-we-do-not-ship-neverallow-rules-all-always-fail
   5
   6 ---
   7  libqpol/src/avrule_query.c |    5 +++--
   8  1 files changed, 3 insertions(+), 2 deletions(-)
   9
  10 diff --git a/libqpol/src/avrule_query.c b/libqpol/src/avrule_query.c
  11 index 749565b..76dcaa3 100644
  12 --- a/libqpol/src/avrule_query.c
  13 +++ b/libqpol/src/avrule_query.c
  14 @@ -57,8 +57,9 @@ int qpol_policy_get_avrule_iter(const qpol_policy_t * policy, uint32_t rule_type
  15
  16         if ((rule_type_mask & QPOL_RULE_NEVERALLOW) && !qpol_policy_has_capability(policy, QPOL_CAP_NEVERALLOW)) {
  17                 ERR(policy, "%s", "Cannot get avrules: Neverallow rules requested but not available");
  18 -               errno = ENOTSUP;
  19 -               return STATUS_ERR;
  20 +/*             errno = ENOTSUP;
  21 +               return STATUS_ERR; */
  22 +               return STATUS_SUCCESS;
  23         }
  24
  25         db = &policy->p->p;
  26 --
  27 1.7.6.2
  28