Skip to content

Commit 892145a

Browse files
dburgenerperfinion
authored andcommitted
Drop explicit calls to seutil and kernel module interfaces in broad files interfaces
Historically, these calls were needed because the interfaces provided an attribute used to check various assertions. However, that attribute was dropped in 2005 with commit 15fefa4. Keeping these calls in prevents removing these permissions from a call to files_manage_all_files() with the $2 argument. Signed-off-by: Daniel Burgener <dburgener@linux.microsoft.com> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
1 parent d0b423d commit 892145a

1 file changed

Lines changed: 0 additions & 8 deletions

File tree

policy/modules/kernel/files.if

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1239,10 +1239,6 @@ interface(`files_manage_all_files',`
12391239
manage_lnk_files_pattern($1, { file_type $2 }, { file_type $2 })
12401240
manage_fifo_files_pattern($1, { file_type $2 }, { file_type $2 })
12411241
manage_sock_files_pattern($1, { file_type $2 }, { file_type $2 })
1242-
1243-
# satisfy the assertions:
1244-
seutil_create_bin_policy($1)
1245-
files_manage_kernel_modules($1)
12461242
')
12471243

12481244
########################################
@@ -1513,10 +1509,6 @@ interface(`files_manage_non_auth_files',`
15131509
manage_lnk_files_pattern($1, non_auth_file_type, non_auth_file_type)
15141510
manage_fifo_files_pattern($1, non_auth_file_type, non_auth_file_type)
15151511
manage_sock_files_pattern($1, non_auth_file_type, non_auth_file_type)
1516-
1517-
# satisfy the assertions:
1518-
seutil_create_bin_policy($1)
1519-
files_manage_kernel_modules($1)
15201512
')
15211513

15221514
########################################

0 commit comments

Comments
 (0)