diff options
| author |   Stephen Smalley <sds@tycho.nsa.gov> | 2015-06-04 16:22:17 -0400 |
|---|---|---|
| committer |   Paul Moore <pmoore@redhat.com> | 2015-06-04 16:22:17 -0400 |
| commit | 42a9699a9fa179c0054ea3cf5ad3cc67104a6162 (patch) | |
| tree | 051b8495510c6e68dc8c10445673aed319df3c03 /security/selinux/ss/ebitmap.c | |
| parent | selinux: enable genfscon labeling for sysfs and pstore files (diff) | |
| download | linux-dev-42a9699a9fa179c0054ea3cf5ad3cc67104a6162.tar.xz linux-dev-42a9699a9fa179c0054ea3cf5ad3cc67104a6162.zip | |
selinux: Remove unused permission definitions
Remove unused permission definitions from SELinux.
Many of these were only ever used in pre-mainline
versions of SELinux, prior to Linux 2.6.0. Some of them
were used in the legacy network or compat_net=1 checks
that were disabled by default in Linux 2.6.18 and
fully removed in Linux 2.6.30.
Permissions never used in mainline Linux:
file swapon
filesystem transition
tcp_socket { connectto newconn acceptfrom }
node enforce_dest
unix_stream_socket { newconn acceptfrom }
Legacy network checks, removed in 2.6.30:
socket { recv_msg send_msg }
node { tcp_recv tcp_send udp_recv udp_send rawip_recv rawip_send dccp_recv dccp_send }
netif { tcp_recv tcp_send udp_recv udp_send rawip_recv rawip_send dccp_recv dccp_send }
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'security/selinux/ss/ebitmap.c')
0 files changed, 0 insertions, 0 deletions