OSDN Git Service

selinux: Remove unused permission definitions
authorStephen Smalley <sds@tycho.nsa.gov>
Thu, 4 Jun 2015 20:22:17 +0000 (16:22 -0400)
committerPaul Moore <pmoore@redhat.com>
Thu, 4 Jun 2015 20:22:17 +0000 (16:22 -0400)
commit42a9699a9fa179c0054ea3cf5ad3cc67104a6162
tree051b8495510c6e68dc8c10445673aed319df3c03
parent8e01472078763ebc1eaea089a1adab75dd982ccd
selinux: Remove unused permission definitions

Remove unused permission definitions from SELinux.
Many of these were only ever used in pre-mainline
versions of SELinux, prior to Linux 2.6.0.  Some of them
were used in the legacy network or compat_net=1 checks
that were disabled by default in Linux 2.6.18 and
fully removed in Linux 2.6.30.

Permissions never used in mainline Linux:
file swapon
filesystem transition
tcp_socket { connectto newconn acceptfrom }
node enforce_dest
unix_stream_socket { newconn acceptfrom }

Legacy network checks, removed in 2.6.30:
socket { recv_msg send_msg }
node { tcp_recv tcp_send udp_recv udp_send rawip_recv rawip_send dccp_recv dccp_send }
netif { tcp_recv tcp_send udp_recv udp_send rawip_recv rawip_send dccp_recv dccp_send }

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <pmoore@redhat.com>
security/selinux/include/classmap.h