From 972654cf0964bcd2a88a7651a5b7b80b1d8fab83 Mon Sep 17 00:00:00 2001
From: Alexander Miroshnichenko <alexminder@gmail.com>
Date: Thu, 3 Jan 2019 13:26:08 +0300
Subject: [PATCH] Remove syncthing tunable_policy.

kernel_read_network_state already give syncthing to get route information. Backup plan with ifconfig does not required.
---
 policy/modules/apps/syncthing.te | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/policy/modules/apps/syncthing.te b/policy/modules/apps/syncthing.te
index f93b6c346..95822c8f9 100644
--- a/policy/modules/apps/syncthing.te
+++ b/policy/modules/apps/syncthing.te
@@ -5,14 +5,6 @@ policy_module(syncthing, 1.1.0)
 # Declarations
 #
 
-## <desc>
-##      <p>
-##      Determine whether syncthing can
-##      run ifconfig/iproute2 to find gateway.
-## </p>
-## </desc>
-gen_tunable(syncthing_can_run_ifconfig, false)
-
 attribute_role syncthing_roles;
 role syncthing_roles types syncthing_t;
 
@@ -78,6 +70,3 @@ optional_policy(`
 	networkmanager_read_pid_files(syncthing_t)
 ')
 
-tunable_policy(`syncthing_can_run_ifconfig',`
-        sysnet_domtrans_ifconfig(syncthing_t)
-')