add in full permission sets now that it will be used for require blocks.

[people/stevee/selinux-policy.git] / refpolicy / Rules.monolithic

diff --git a/refpolicy/Rules.monolithic b/refpolicy/Rules.monolithic
index b6aab0bcafe2fb4615a78b7a437adae89cbbacca..95034857296b580ef658c6e0370cae852511d725 100644 (file)
--- a/refpolicy/Rules.monolithic
+++ b/refpolicy/Rules.monolithic
@@ -101,9 +101,11 @@ $(TMPDIR)/pre_te_files.conf: $(PRE_TE_FILES)
        $(verbose) $(M4) $(M4PARAM) $^ > $@
 
 $(TMPDIR)/generated_definitions.conf: $(ALL_TE_FILES)
-# per-userdomain templates:
        @test -d $(TMPDIR) || mkdir -p $(TMPDIR)
-       $(verbose) echo "define(\`base_per_userdomain_template',\`" > $@
+# define all available object classes
+       $(verbose) $(GENPERM) $(AVS) $(SECCLASS) > $@
+# per-userdomain templates:
+       $(verbose) echo "define(\`base_per_userdomain_template',\`" >> $@
        $(verbose) $(foreach mod,$(basename $(notdir $(ALL_MODULES))), \
                echo "ifdef(\`""$(mod)""_per_userdomain_template',\`""$(mod)""_per_userdomain_template("'$$*'")')" >> $@ ;)
        $(verbose) echo "')" >> $@