Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 47ac19ea authored by Eric Paris's avatar Eric Paris
Browse files

selinux: drop unused packet flow permissions 



These permissions are not used and can be dropped in the kernel
definitions.

Suggested-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: default avatarEric Paris <eparis@redhat.com>
Acked-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 4a7ab3dc

security/selinux/include/classmap.h

+1 −2
Original line number Original line Diff line number Diff line
@@ -132,8 +132,7 @@ struct security_class_mapping secclass_map[] = { 
	{ "appletalk_socket",

	{ "appletalk_socket",

	  { COMMON_SOCK_PERMS, NULL } },

	  { COMMON_SOCK_PERMS, NULL } },

	{ "packet",

	{ "packet",

	  { "send", "recv", "relabelto", "flow_in", "flow_out",

	  { "send", "recv", "relabelto", "forward_in", "forward_out", NULL } },

	    "forward_in", "forward_out", NULL } },

	{ "key",

	{ "key",

	  { "view", "read", "write", "search", "link", "setattr", "create",

	  { "view", "read", "write", "search", "link", "setattr", "create",

	    NULL } },

	    NULL } },