aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSven Vermeulen <sven.vermeulen@siphos.be>2012-07-29 09:18:12 +0200
committerSven Vermeulen <sven.vermeulen@siphos.be>2012-07-29 09:18:12 +0200
commit9b5d3482a2a3e51aeae9402e8b56156f5eceffd7 (patch)
tree6bcd41464348e6f4099bb8c9f950fa82f559947e /policy/modules/system/udev.if
parentReintroduce errors from refpolicy, will clean later (messes up patching) (diff)
downloadhardened-refpolicy-9b5d3482a2a3e51aeae9402e8b56156f5eceffd7.tar.gz
hardened-refpolicy-9b5d3482a2a3e51aeae9402e8b56156f5eceffd7.tar.bz2
hardened-refpolicy-9b5d3482a2a3e51aeae9402e8b56156f5eceffd7.zip
Userspace confinement proceedings. Include xdg_videos support and mozilla only accessing .mozilla
Diffstat (limited to 'policy/modules/system/udev.if')
-rw-r--r--policy/modules/system/udev.if39
1 files changed, 0 insertions, 39 deletions
diff --git a/policy/modules/system/udev.if b/policy/modules/system/udev.if
index 53f6d623..7423f26e 100644
--- a/policy/modules/system/udev.if
+++ b/policy/modules/system/udev.if
@@ -132,45 +132,6 @@ interface(`udev_dontaudit_rw_dgram_sockets',`
########################################
## <summary>
-## Do not audit attempts to get attributes
-## of a udev netlink_kobject_uevent_socket
-## </summary>
-## <param name="domain">
-## <summary>
-## Domain to not audit.
-## </summary>
-## </param>
-#
-interface(`udev_dontaudit_getattr_netlink_kobject_uevent_sockets',`
- gen_require(`
- type udev_t;
- ')
-
- dontaudit $1 udev_t:netlink_kobject_uevent_socket getattr;
-')
-
-########################################
-## <summary>
-## Do not audit attempts to get attributes
-## of a udev unix_stream_socket.
-## </summary>
-## <param name="domain">
-## <summary>
-## Domain to not audit.
-## </summary>
-## </param>
-#
-interface(`udev_dontaudit_getattr_unix_stream_sockets',`
- gen_require(`
- type udev_t;
- ')
-
- dontaudit $1 udev_t:unix_stream_socket getattr;
-')
-
-
-########################################
-## <summary>
## Read udev rules files
## </summary>
## <param name="domain">