| Message ID | 20200508154138.24217-2-stephen.smalley.work@gmail.com (mailing list archive) |
|---|---|
| State | Accepted |
| Delegated to: | Ondrej Mosnáček |
| Headers | show |
| Series | Update to work on Debian | expand |
diff --git a/policy/test_capable_net.te b/policy/test_capable_net.te index 80559f6..2255a14 100644 --- a/policy/test_capable_net.te +++ b/policy/test_capable_net.te @@ -28,8 +28,6 @@ corenet_raw_sendrecv_generic_if(capabledomain) corenet_tcp_sendrecv_all_nodes(capabledomain) corenet_udp_sendrecv_all_nodes(capabledomain) corenet_raw_sendrecv_all_nodes(capabledomain) -corenet_tcp_sendrecv_all_ports(capabledomain) -corenet_udp_sendrecv_all_ports(capabledomain) corenet_all_recvfrom_unlabeled(test_ncap_t) corenet_all_recvfrom_unlabeled(test_resncap_t) corenet_tcp_bind_all_nodes(capabledomain)
Remove obsolete corenet_tcp/udp_sendrecv_all_ports() calls; the interfaces have been removed from upstream refpolicy since the permissions were obsolete and unused in upstream kernels. Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com> --- policy/test_capable_net.te | 2 -- 1 file changed, 2 deletions(-)