diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2015-06-04 16:22:17 -0400 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2019-07-06 12:01:16 +0200 |
| commit | 6c9d3b1942bd295f3696b73d90e67ba7864279b5 (patch) | |
| tree | 0b6f89a5d76252416ab6b37eb46da3a0441c7c3c /kernel/debug | |
| parent | ee8db9563d00e91bf3a2ce0e5f6152609bdf02ea (diff) | |
selinux: Remove unused permission definitions
Remove unused permission definitions from SELinux.
Many of these were only ever used in pre-mainline
versions of SELinux, prior to Linux 2.6.0. Some of them
were used in the legacy network or compat_net=1 checks
that were disabled by default in Linux 2.6.18 and
fully removed in Linux 2.6.30.
Permissions never used in mainline Linux:
file swapon
filesystem transition
tcp_socket { connectto newconn acceptfrom }
node enforce_dest
unix_stream_socket { newconn acceptfrom }
Legacy network checks, removed in 2.6.30:
socket { recv_msg send_msg }
node { tcp_recv tcp_send udp_recv udp_send rawip_recv rawip_send dccp_recv dccp_send }
netif { tcp_recv tcp_send udp_recv udp_send rawip_recv rawip_send dccp_recv dccp_send }
Change-Id: I976d81760be7a800d696afb9ffc6c7a5dafa5c69
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'kernel/debug')
0 files changed, 0 insertions, 0 deletions