Make filetrans rules optional so base policy will build

diff --git a/policy/modules/kernel/domain.te b/policy/modules/kernel/domain.te
index d0eec7cf2b0ebc99930fa6f12059e6094cba14d9..a60d2f88c9cacd5bff1185b2c7f2ebddb6b3ec30 100644 (file)
--- a/policy/modules/kernel/domain.te
+++ b/policy/modules/kernel/domain.te
@@ -204,17 +204,9 @@ storage_filetrans_all_named_dev(unconfined_domain_type)
 
 term_filetrans_all_named_dev(unconfined_domain_type)
 
-authlogin_filetrans_named_content(unconfined_domain_type)
-
-libs_filetrans_named_content(unconfined_domain_type)
-
-miscfiles_filetrans_named_content(unconfined_domain_type)
-
-modules_filetrans_named_content(unconfined_domain_type)
-
-sysnet_filetrans_named_content(unconfined_domain_type)
-
-userdom_user_home_dir_filetrans_user_home_content(unconfined_domain_type, { dir file lnk_file fifo_file sock_file })
+optional_policy(`
+       authlogin_filetrans_named_content(unconfined_domain_type)
+')
 
 optional_policy(`
        alsa_filetrans_named_content(unconfined_domain_type)
@@ -244,10 +236,22 @@ optional_policy(`
        kerberos_filetrans_named_content(unconfined_domain_type)
 ')
 
+optional_policy(`
+       libs_filetrans_named_content(unconfined_domain_type)
+')
+
+optional_policy(`
+       miscfiles_filetrans_named_content(unconfined_domain_type)
+')
+
 optional_policy(`
        mta_filetrans_named_content(unconfined_domain_type)
 ')
 
+optional_policy(`
+       modules_filetrans_named_content(unconfined_domain_type)
+')
+
 optional_policy(`
        networkmanager_filetrans_named_content(unconfined_domain_type)
 ')
@@ -269,6 +273,14 @@ optional_policy(`
        quota_filetrans_named_content(unconfined_domain_type)
 ')
 
+optional_policy(`
+       sysnet_filetrans_named_content(unconfined_domain_type)
+')
+
+optional_policy(`
+       userdom_user_home_dir_filetrans_user_home_content(unconfined_domain_type, { dir file lnk_file fifo_file sock_file })
+')
+
 optional_policy(`
        virt_filetrans_home_content(unconfined_domain_type)
 ')