aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <pebenito@ieee.org>2021-01-08 16:28:35 -0500
committerJason Zaman <perfinion@gentoo.org>2021-01-31 17:21:41 -0800
commitdd81d535339142bbf113bd5a42313900a6cda728 (patch)
tree5f3e704260dcb34f92430836d7d17b81a2d1cbb2 /policy/modules/system/udev.fc
parentcorosync, pacemaker: Module version bump. (diff)
downloadhardened-refpolicy-dd81d535339142bbf113bd5a42313900a6cda728.tar.gz
hardened-refpolicy-dd81d535339142bbf113bd5a42313900a6cda728.tar.bz2
hardened-refpolicy-dd81d535339142bbf113bd5a42313900a6cda728.zip
udev: Drop udev_tbl_t.
This usage under /dev/.udev has been unused for a very long time and replaced by functionality in /run/udev. Since these have separate types, take this opportunity to revoke these likely unnecessary rules. Fixes #221 Derived from Laurent Bigonville's work in #230 Signed-off-by: Chris PeBenito <pebenito@ieee.org> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Diffstat (limited to 'policy/modules/system/udev.fc')
-rw-r--r--policy/modules/system/udev.fc4
1 files changed, 0 insertions, 4 deletions
diff --git a/policy/modules/system/udev.fc b/policy/modules/system/udev.fc
index ad617ea3..8270bb21 100644
--- a/policy/modules/system/udev.fc
+++ b/policy/modules/system/udev.fc
@@ -1,7 +1,3 @@
-/dev/\.udev(/.*)? -- gen_context(system_u:object_r:udev_tbl_t,s0)
-/dev/\.udevdb -- gen_context(system_u:object_r:udev_tbl_t,s0)
-/dev/udev\.tbl -- gen_context(system_u:object_r:udev_tbl_t,s0)
-
/etc/dev\.d/.+ -- gen_context(system_u:object_r:udev_helper_exec_t,s0)
/etc/hotplug\.d/default/udev.* -- gen_context(system_u:object_r:udev_helper_exec_t,s0)