Skip to content
Snippets Groups Projects
Commit 1d18ef44 authored by Nick Kralevich's avatar Nick Kralevich Committed by android-build-merger
Browse files

access_vectors: Remove unused permission definitions

am: 11dc03e5

Change-Id: Ie2c7f871c47d378cc3b8399e174b229439511452
parents 2c2ee695 11dc03e5
No related branches found
No related tags found
No related merge requests found
......@@ -24,7 +24,6 @@ common file
link
rename
execute
swapon
quotaon
mounton
}
......@@ -57,8 +56,6 @@ common socket
shutdown
recvfrom
sendto
recv_msg
send_msg
name_bind
}
......@@ -97,7 +94,6 @@ class filesystem
getattr
relabelfrom
relabelto
transition
associate
quotamod
quotaget
......@@ -184,9 +180,6 @@ inherits socket
class tcp_socket
inherits socket
{
connectto
newconn
acceptfrom
node_bind
name_connect
}
......@@ -205,29 +198,12 @@ inherits socket
class node
{
tcp_recv
tcp_send
udp_recv
udp_send
rawip_recv
rawip_send
enforce_dest
dccp_recv
dccp_send
recvfrom
sendto
}
class netif
{
tcp_recv
tcp_send
udp_recv
udp_send
rawip_recv
rawip_send
dccp_recv
dccp_send
ingress
egress
}
......@@ -245,8 +221,6 @@ class unix_stream_socket
inherits socket
{
connectto
newconn
acceptfrom
}
class unix_dgram_socket
......
......@@ -237,7 +237,7 @@ define(`selinux_check_access', `
r_dir_file($1, selinuxfs)
allow $1 selinuxfs:file w_file_perms;
allow $1 kernel:security compute_av;
allow $1 self:netlink_selinux_socket { read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto recv_msg send_msg name_bind };
allow $1 self:netlink_selinux_socket { read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind };
')
#####################################
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment