From c99104ff1ae4ec7f7d5d93c6ee5de6798e158f56 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Thu, 23 Jun 2022 15:24:14 -0400 Subject: [PATCH] mcs: Remove duplicate node_bind constraint. Signed-off-by: Chris PeBenito --- policy/mcs | 3 --- 1 file changed, 3 deletions(-) diff --git a/policy/mcs b/policy/mcs index fa505d3db..c3d76d093 100644 --- a/policy/mcs +++ b/policy/mcs @@ -162,9 +162,6 @@ mlsconstrain db_language { drop getattr setattr relabelfrom execute } mlsconstrain db_blob { drop getattr setattr relabelfrom read write import export } (( h1 dom h2 ) or ( t1 != mcs_constrained_type )); -mlsconstrain { tcp_socket udp_socket rawip_socket } node_bind - (( h1 dom h2 ) or ( t1 != mcs_constrained_type )); - # The node recvfrom/sendto ops, the recvfrom permission is a "write" operation # because the subject in this particular case is the remote domain which is # writing data out the network node which is acting as the object