From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id AA3801395E3 for ; Tue, 6 Dec 2016 12:26:40 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C8FFEE0BD1; Tue, 6 Dec 2016 12:26:39 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9FB58E0BD1 for ; Tue, 6 Dec 2016 12:26:39 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id DA08434102B for ; Tue, 6 Dec 2016 12:26:38 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 7B57224A2 for ; Tue, 6 Dec 2016 12:26:37 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1480259492.8fad664ca60249f1eefd1344de33361f1501b14f.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/modutils.te X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 8fad664ca60249f1eefd1344de33361f1501b14f X-VCS-Branch: master Date: Tue, 6 Dec 2016 12:26:37 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 8ba85a0d-e73b-483e-adab-5ad1a5234c12 X-Archives-Hash: 9d30f9f2629005ae511ea2a5c4ec446e commit: 8fad664ca60249f1eefd1344de33361f1501b14f Author: Luis Ressel aixah de> AuthorDate: Sun Nov 27 13:59:48 2016 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sun Nov 27 15:11:32 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8fad664c modutils.te: Temporarily remove custom gentoo changes policy/modules/system/modutils.te | 25 ------------------------- 1 file changed, 25 deletions(-) diff --git a/policy/modules/system/modutils.te b/policy/modules/system/modutils.te index 4436336..de34ed4 100644 --- a/policy/modules/system/modutils.te +++ b/policy/modules/system/modutils.te @@ -89,10 +89,6 @@ tunable_policy(`use_samba_home_dirs',` ') optional_policy(` - dracut_rw_tmp_files(depmod_t) -') - -optional_policy(` rpm_rw_pipes(depmod_t) rpm_manage_script_tmp_files(depmod_t) ') @@ -338,24 +334,3 @@ ifdef(`distro_ubuntu',` unconfined_domain(update_modules_t) ') ') - -ifdef(`distro_gentoo',` - ############################ - # - # insmod_t - # - - # During "make modules_install" insmod removes old/previous deps - delete_files_pattern(insmod_t, modules_object_t, modules_dep_t) - # During "make modules_install" temp files created by admin - # that invoked the command are later used by kmod. - userdom_manage_user_tmp_files(insmod_t) - userdom_manage_user_tmp_dirs(insmod_t) - - # Needed to support signed kernel modules (to find key in modsign_keyring) - kernel_search_key(insmod_t) - - files_list_src(insmod_t) - files_manage_src_files(insmod_t) - files_manage_kernel_modules(insmod_t) -')