diff options
| author |   Chris PeBenito <chpebeni@linux.microsoft.com> | 2022-06-23 15:24:14 -0400 |
|---|---|---|
| committer |   Jason Zaman <perfinion@gentoo.org> | 2022-09-03 11:41:55 -0700 |
| commit | aa9b7bc301b4d7015743cdda1a29395588ed1200 (patch) | |
| tree | 70402418acf1edafb8ab26fc3e45c51d4acb9091 | |
| parent | mcs: Add missing process permission constraints. (diff) | |
| download | hardened-refpolicy-aa9b7bc301b4d7015743cdda1a29395588ed1200.tar.gz hardened-refpolicy-aa9b7bc301b4d7015743cdda1a29395588ed1200.tar.bz2 hardened-refpolicy-aa9b7bc301b4d7015743cdda1a29395588ed1200.zip | |
mcs: Remove duplicate node_bind constraint.
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
| -rw-r--r-- | policy/mcs | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/policy/mcs b/policy/mcs index fa505d3db..c3d76d093 100644 --- a/policy/mcs +++ b/policy/mcs @@ -162,9 +162,6 @@ mlsconstrain db_language { drop getattr setattr relabelfrom execute } mlsconstrain db_blob { drop getattr setattr relabelfrom read write import export } (( h1 dom h2 ) or ( t1 != mcs_constrained_type )); -mlsconstrain { tcp_socket udp_socket rawip_socket } node_bind - (( h1 dom h2 ) or ( t1 != mcs_constrained_type )); - # The node recvfrom/sendto ops, the recvfrom permission is a "write" operation # because the subject in this particular case is the remote domain which is # writing data out the network node which is acting as the object |