| 1 |
commit: b1b6e9dfd6982086f38e0e4e008d31777ee94255 |
| 2 |
Author: Jason Zaman <jason <AT> perfinion <DOT> com> |
| 3 |
AuthorDate: Sun Feb 10 06:09:02 2019 +0000 |
| 4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Sun Feb 10 06:09:02 2019 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b1b6e9df |
| 7 |
|
| 8 |
remove duplicated dev_dontaudit_read_sysfs files_dontaudit_read_etc_files |
| 9 |
|
| 10 |
Signed-off-by: Jason Zaman <jason <AT> perfinion.com> |
| 11 |
|
| 12 |
policy/modules/kernel/devices.if | 20 -------------------- |
| 13 |
policy/modules/kernel/files.if | 20 -------------------- |
| 14 |
2 files changed, 40 deletions(-) |
| 15 |
|
| 16 |
diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if |
| 17 |
index 84b9d8fb..87fabe6f 100644 |
| 18 |
--- a/policy/modules/kernel/devices.if |
| 19 |
+++ b/policy/modules/kernel/devices.if |
| 20 |
@@ -5236,26 +5236,6 @@ interface(`dev_unconfined',` |
| 21 |
|
| 22 |
# We cannot use ifdef distro_gentoo for interfaces |
| 23 |
|
| 24 |
-######################################## |
| 25 |
-## <summary> |
| 26 |
-## Dont audit attempts to read hardware state information |
| 27 |
-## </summary> |
| 28 |
-## <param name="domain"> |
| 29 |
-## <summary> |
| 30 |
-## Domain for which the attempts do not need to be audited |
| 31 |
-## </summary> |
| 32 |
-## </param> |
| 33 |
-# |
| 34 |
-interface(`dev_dontaudit_read_sysfs',` |
| 35 |
- gen_require(` |
| 36 |
- type sysfs_t; |
| 37 |
- ') |
| 38 |
- |
| 39 |
- dontaudit $1 sysfs_t:file read_file_perms; |
| 40 |
- dontaudit $1 sysfs_t:dir list_dir_perms; |
| 41 |
- dontaudit $1 sysfs_t:lnk_file read_lnk_file_perms; |
| 42 |
-') |
| 43 |
- |
| 44 |
######################################## |
| 45 |
## <summary> |
| 46 |
## Relabel cpu online hardware state information. |
| 47 |
|
| 48 |
diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if |
| 49 |
index 0ace4966..b4db9c89 100644 |
| 50 |
--- a/policy/modules/kernel/files.if |
| 51 |
+++ b/policy/modules/kernel/files.if |
| 52 |
@@ -7111,26 +7111,6 @@ interface(`files_dontaudit_read_etc_runtime',` |
| 53 |
dontaudit $1 etc_runtime_t:file read_file_perms; |
| 54 |
') |
| 55 |
|
| 56 |
-######################################## |
| 57 |
-## <summary> |
| 58 |
-## Do not audit attempts to read files |
| 59 |
-## in /etc |
| 60 |
-## </summary> |
| 61 |
-## <param name="domain"> |
| 62 |
-## <summary> |
| 63 |
-## Domain to not audit. |
| 64 |
-## </summary> |
| 65 |
-## </param> |
| 66 |
-# |
| 67 |
-interface(`files_dontaudit_read_etc_files',` |
| 68 |
- gen_require(` |
| 69 |
- type etc_t; |
| 70 |
- ') |
| 71 |
- |
| 72 |
- dontaudit $1 etc_t:file { getattr read }; |
| 73 |
-') |
| 74 |
- |
| 75 |
- |
| 76 |
######################################### |
| 77 |
## <summary> |
| 78 |
## List usr/src files |
Archives