nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

portage: drop bizarre conditional TODO blocks

Browse Source 
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
This commit is contained in:
Christian Göttsche 2020-05-08 19:54:45 +02:00
parent 8f308eb846
commit e683d67f46
2 changed files with 0 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
policy/modules/admin/portage.if
View File

@ -195,14 +195,6 @@ interface(`portage_compile_domain',`
fs_manage_nfs_files($1)
fs_manage_nfs_symlinks($1)
')
ifdef(`TODO',`
# some gui ebuilds want to interact with X server, like xawtv
optional_policy(`
allow $1 xdm_xserver_tmp_t:dir { add_entry_dir_perms del_entry_dir_perms };
allow $1 xdm_xserver_tmp_t:sock_file { create_sock_file_perms delete_sock_file_perms write_sock_file_perms };
')
') dnl end TODO
')
########################################

6
policy/modules/admin/portage.te
View File

@ -234,12 +234,6 @@ optional_policy(`
usermanage_run_useradd(portage_t, portage_roles)
')
ifdef(`TODO',`
# seems to work ok without these
dontaudit portage_t device_t:{ blk_file chr_file } getattr;
dontaudit portage_t proc_t:dir setattr_dir_perms;
')
##########################################
#
# Portage fetch domain