corecmd_read_bin_symlinks(): remove deprecated and redundant calls

This commit is contained in:
cgzones 2017-03-03 11:59:10 +01:00
parent cef1f7bb29
commit d2702a4224
5 changed files with 0 additions and 6 deletions

View File

@ -83,7 +83,6 @@ template(`sudo_role_template',`
kernel_read_system_state($1_sudo_t)
kernel_link_key($1_sudo_t)
corecmd_read_bin_symlinks($1_sudo_t)
corecmd_exec_all_executables($1_sudo_t)
dev_getattr_fs($1_sudo_t)

View File

@ -229,8 +229,6 @@ template(`ssh_server_template', `
auth_rw_login_records($1_t)
auth_rw_faillog($1_t)
corecmd_read_bin_symlinks($1_t)
corecmd_getattr_bin_files($1_t)
# for sshd subsystems, such as sftp-server.
corecmd_getattr_bin_files($1_t)

View File

@ -60,7 +60,6 @@ kernel_search_key(local_login_t)
kernel_link_key(local_login_t)
corecmd_list_bin(local_login_t)
corecmd_read_bin_symlinks(local_login_t)
# cjp: these are probably not needed:
corecmd_read_bin_files(local_login_t)
corecmd_read_bin_pipes(local_login_t)

View File

@ -411,7 +411,6 @@ interface(`logging_check_exec_syslog',`
')
corecmd_list_bin($1)
corecmd_read_bin_symlinks($1)
allow $1 syslogd_exec_t:file execute;
')

View File

@ -242,7 +242,6 @@ kernel_read_system_state(newrole_t)
kernel_read_kernel_sysctls(newrole_t)
corecmd_list_bin(newrole_t)
corecmd_read_bin_symlinks(newrole_t)
dev_read_urand(newrole_t)