diff options
| author | Eric Paris <eparis@redhat.com> | 2011-02-25 21:39:20 +0100 |
|---|---|---|
| committer | Eric Paris <eparis@redhat.com> | 2011-02-25 21:40:00 +0100 |
| commit | 47ac19ea429aee561f66e9cd05b908e8ffbc498a (patch) | |
| tree | 22a95f4b75ab4dd71949f8f337463638ff6711e3 | |
| parent | selinux: Fix packet forwarding checks on postrouting (diff) | |
| download | linux-47ac19ea429aee561f66e9cd05b908e8ffbc498a.tar.xz linux-47ac19ea429aee561f66e9cd05b908e8ffbc498a.zip | |
selinux: drop unused packet flow permissions
These permissions are not used and can be dropped in the kernel
definitions.
Suggested-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
| -rw-r--r-- | security/selinux/include/classmap.h | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h index 7ed3663332ec..4227e5fa7861 100644 --- a/security/selinux/include/classmap.h +++ b/security/selinux/include/classmap.h @@ -132,8 +132,7 @@ struct security_class_mapping secclass_map[] = { { "appletalk_socket", { COMMON_SOCK_PERMS, NULL } }, { "packet", - { "send", "recv", "relabelto", "flow_in", "flow_out", - "forward_in", "forward_out", NULL } }, + { "send", "recv", "relabelto", "forward_in", "forward_out", NULL } }, { "key", { "view", "read", "write", "search", "link", "setattr", "create", NULL } }, |