policy.h: Don't allow `user' actions in user policy files.

[yaid] / policy.c

diff --git a/policy.c b/policy.c
index 06475f340787b40be624fe1752f003811c991b37..3d3eedb29f47328354f835f3d4f3c92b8c4098ee 100644 (file)
--- a/policy.c
+++ b/policy.c
@@ -249,6 +249,7 @@ static int parse_action(FILE *fp, struct action *act)
       m = 0;
       for (;;) {
        if ((t = parse_actname(fp, &a)) != 0) break;
+       if (a == A_USER) return (T_ERROR);
        m |= (1 << a);
       }
       if (t != T_EOL && t != T_EOF) return (t);