From 512e8cf9ff0c4ee349a9c1a402b1c31d91165df7 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 28 Apr 2006 20:44:15 +0000 Subject: [PATCH] remove broad ldap access --- refpolicy/policy/modules/kernel/domain.if | 5 ----- 1 file changed, 5 deletions(-) diff --git a/refpolicy/policy/modules/kernel/domain.if b/refpolicy/policy/modules/kernel/domain.if index 8c3b719f7..95822fb8e 100644 --- a/refpolicy/policy/modules/kernel/domain.if +++ b/refpolicy/policy/modules/kernel/domain.if @@ -58,11 +58,6 @@ interface(`domain_type',` # these seem questionable: - # allow any domain to connect to the LDAP server - optional_policy(` - ldap_use($1) - ') - optional_policy(` rpm_use_fds($1) rpm_read_pipes($1)