Add missing optional_policy() to files_relabel_all_files()

The calls to interfaces from other modules must be enclosed in optional_policy(), otherwise the usage of this interface may lead to build errors. Signed-off-by: Ondrej Mosnacek <[email protected]> Resolves: rhbz#2182033
fedora-selinux · Oct 20, 2023 · 9d2f906 · 9d2f906
1 parent d2f28ac
commit 9d2f906
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
@@ -1765,8 +1765,12 @@ interface(`files_relabel_all_files',`
 	relabel_chr_files_pattern($1, { file_type $2 }, { file_type $2 })
 
 	# satisfy the assertions:
-	seutil_relabelto_bin_policy($1)
-    auth_relabelto_shadow($1)
+	optional_policy(`
+		seutil_relabelto_bin_policy($1)
+	')
+	optional_policy(`
+		auth_relabelto_shadow($1)
+	')
 ')
 
 ########################################