nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

aptcacher: Drop broken config interfaces.

Browse Source 
The aptcacher_etc_t type does not exist in the policy.  The block in cron
will never be enabled because of this, so drop that too.

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2021-01-28 14:57:08 -05:00
parent 920ecf48ce
commit a404dc677e
2 changed files with 0 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
policy/modules/services/aptcacher.if
View File

@ -63,43 +63,3 @@ interface(`aptcacher_stream_connect',`
files_search_runtime($1)
stream_connect_pattern($1, aptcacher_runtime_t, aptcacher_runtime_t, aptcacher_t)
')
######################################
## <summary>
## read aptcacher config
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to read it.
## </summary>
## </param>
#
interface(`aptcacher_read_config',`
gen_require(`
type aptcacher_etc_t;
')
files_search_etc($1)
allow $1 aptcacher_etc_t:dir list_dir_perms;
allow $1 aptcacher_etc_t:file read_file_perms;
')
######################################
## <summary>
## mmap and read aptcacher config
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to read it.
## </summary>
## </param>
#
interface(`aptcacher_mmap_read_config',`
gen_require(`
type aptcacher_etc_t;
')
files_search_etc($1)
allow $1 aptcacher_etc_t:dir list_dir_perms;
allow $1 aptcacher_etc_t:file mmap_read_file_perms;
')

5
policy/modules/services/cron.te
View File

@ -339,11 +339,6 @@ ifdef(`distro_debian',`
dpkg_manage_db(system_cronjob_t)
')
optional_policy(`
aptcacher_mmap_read_config(system_cronjob_t)
corenet_tcp_connect_aptcacher_port(system_cronjob_t)
')
optional_policy(`
logwatch_search_cache_dir(crond_t)
')