diff --git a/policy/modules/admin/portage.if b/policy/modules/admin/portage.if index d5e96ce02..3a985cca1 100644 --- a/policy/modules/admin/portage.if +++ b/policy/modules/admin/portage.if @@ -195,14 +195,6 @@ interface(`portage_compile_domain',` fs_manage_nfs_files($1) fs_manage_nfs_symlinks($1) ') - - ifdef(`TODO',` - # some gui ebuilds want to interact with X server, like xawtv - optional_policy(` - allow $1 xdm_xserver_tmp_t:dir { add_entry_dir_perms del_entry_dir_perms }; - allow $1 xdm_xserver_tmp_t:sock_file { create_sock_file_perms delete_sock_file_perms write_sock_file_perms }; - ') - ') dnl end TODO ') ######################################## diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te index 0b5379496..4d6866d37 100644 --- a/policy/modules/admin/portage.te +++ b/policy/modules/admin/portage.te @@ -234,12 +234,6 @@ optional_policy(` usermanage_run_useradd(portage_t, portage_roles) ') -ifdef(`TODO',` -# seems to work ok without these -dontaudit portage_t device_t:{ blk_file chr_file } getattr; -dontaudit portage_t proc_t:dir setattr_dir_perms; -') - ########################################## # # Portage fetch domain