RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove syncthing tunable_policy. 

kernel_read_network_state already give syncthing to get route information. Backup plan with ifconfig does not required.
This commit is contained in:
Alexander Miroshnichenko 2019-01-03 13:26:08 +03:00
parent 8b2add4140
commit 972654cf09
1 changed files with 0 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
policy/modules/apps/syncthing.te
View File

@ -5,14 +5,6 @@ policy_module(syncthing, 1.1.0)
# Declarations # Declarations
# #
## <desc>
## <p>
## Determine whether syncthing can
## run ifconfig/iproute2 to find gateway.
## </p>
## </desc>
gen_tunable(syncthing_can_run_ifconfig, false)
attribute_role syncthing_roles; attribute_role syncthing_roles;
role syncthing_roles types syncthing_t; role syncthing_roles types syncthing_t;
@ -78,6 +70,3 @@ optional_policy(`
networkmanager_read_pid_files(syncthing_t) networkmanager_read_pid_files(syncthing_t)
') ')
tunable_policy(`syncthing_can_run_ifconfig',`
sysnet_domtrans_ifconfig(syncthing_t)
')