aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason Zaman <perfinion@gentoo.org>2020-02-15 16:28:18 +0800
committerJason Zaman <perfinion@gentoo.org>2020-02-15 16:31:07 +0800
commitfd6ef0c54af495c90e7f5335923ba6274fdb36ac (patch)
tree9650cf196050f0ea8a15fa2ead4839806a64b4a8 /policy/modules/contrib
parentMerge upstream (diff)
downloadhardened-refpolicy-fd6ef0c54af495c90e7f5335923ba6274fdb36ac.tar.gz
hardened-refpolicy-fd6ef0c54af495c90e7f5335923ba6274fdb36ac.tar.bz2
hardened-refpolicy-fd6ef0c54af495c90e7f5335923ba6274fdb36ac.zip
access_vectors: Remove gentoo-specific unused permissions
Follow-on to commit 8c38998a0c3024ef16de5fdc1bc12cef5c521759 tcp/udp sendrecv permissions are obsolete and removed from the policy completely. Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Diffstat (limited to 'policy/modules/contrib')
-rw-r--r--policy/modules/contrib/bitcoin.te2
-rw-r--r--policy/modules/contrib/dirsrv.te1
-rw-r--r--policy/modules/contrib/dropbox.te1
-rw-r--r--policy/modules/contrib/kdeconnect.te2
-rw-r--r--policy/modules/contrib/mutt.te2
-rw-r--r--policy/modules/contrib/pan.te1
-rw-r--r--policy/modules/contrib/rtorrent.te1
-rw-r--r--policy/modules/contrib/skype.te1
8 files changed, 0 insertions, 11 deletions
diff --git a/policy/modules/contrib/bitcoin.te b/policy/modules/contrib/bitcoin.te
index c5667519..6cc82f77 100644
--- a/policy/modules/contrib/bitcoin.te
+++ b/policy/modules/contrib/bitcoin.te
@@ -69,12 +69,10 @@ corenet_tcp_bind_bitcoin_port(bitcoin_t)
corenet_tcp_connect_bitcoin_port(bitcoin_t)
corenet_tcp_connect_http_port(bitcoin_t)
corenet_tcp_bind_generic_node(bitcoin_t)
-corenet_tcp_sendrecv_bitcoin_port(bitcoin_t)
corenet_tcp_sendrecv_generic_if(bitcoin_t)
corenet_tcp_sendrecv_generic_node(bitcoin_t)
#corenet_sendrecv_dns_server_packets(bitcoin_t)
#corenet_udp_bind_dns_port(bitcoin_t)
-#corenet_udp_sendrecv_dns_port(bitcoin_t)
dev_read_sysfs(bitcoin_t)
dev_read_urand(bitcoin_t)
diff --git a/policy/modules/contrib/dirsrv.te b/policy/modules/contrib/dirsrv.te
index e7c8d06e..0fa0b069 100644
--- a/policy/modules/contrib/dirsrv.te
+++ b/policy/modules/contrib/dirsrv.te
@@ -125,7 +125,6 @@ corenet_all_recvfrom_unlabeled(dirsrv_t)
corenet_all_recvfrom_netlabel(dirsrv_t)
corenet_tcp_sendrecv_generic_if(dirsrv_t)
corenet_tcp_sendrecv_generic_node(dirsrv_t)
-corenet_tcp_sendrecv_all_ports(dirsrv_t)
corenet_tcp_bind_all_nodes(dirsrv_t)
corenet_tcp_bind_ldap_port(dirsrv_t)
corenet_tcp_bind_all_rpc_ports(dirsrv_t)
diff --git a/policy/modules/contrib/dropbox.te b/policy/modules/contrib/dropbox.te
index 80d8af37..2aa9a93b 100644
--- a/policy/modules/contrib/dropbox.te
+++ b/policy/modules/contrib/dropbox.te
@@ -108,7 +108,6 @@ corenet_tcp_sendrecv_generic_node(dropbox_t)
tunable_policy(`dropbox_bind_port',`
allow dropbox_t self:tcp_socket { accept listen };
- allow dropbox_t self:udp_socket { send_msg recv_msg };
corenet_tcp_bind_dropbox_port(dropbox_t)
corenet_udp_bind_dropbox_port(dropbox_t)
diff --git a/policy/modules/contrib/kdeconnect.te b/policy/modules/contrib/kdeconnect.te
index 92be330d..8e6b5226 100644
--- a/policy/modules/contrib/kdeconnect.te
+++ b/policy/modules/contrib/kdeconnect.te
@@ -72,9 +72,7 @@ corenet_sendrecv_kdeconnect_server_packets(kdeconnect_t)
corenet_tcp_bind_kdeconnect_port(kdeconnect_t)
corenet_tcp_bind_generic_node(kdeconnect_t)
corenet_tcp_connect_kdeconnect_port(kdeconnect_t)
-corenet_tcp_sendrecv_kdeconnect_port(kdeconnect_t)
corenet_udp_bind_kdeconnect_port(kdeconnect_t)
-corenet_udp_sendrecv_kdeconnect_port(kdeconnect_t)
corenet_udp_bind_generic_node(kdeconnect_t)
dev_read_sysfs(kdeconnect_t)
diff --git a/policy/modules/contrib/mutt.te b/policy/modules/contrib/mutt.te
index 393b9438..bc09f380 100644
--- a/policy/modules/contrib/mutt.te
+++ b/policy/modules/contrib/mutt.te
@@ -59,8 +59,6 @@ corenet_tcp_connect_pop_port(mutt_t)
corenet_tcp_connect_smtp_port(mutt_t)
corenet_tcp_sendrecv_generic_if(mutt_t)
corenet_tcp_sendrecv_generic_node(mutt_t)
-corenet_tcp_sendrecv_pop_port(mutt_t)
-corenet_tcp_sendrecv_smtp_port(mutt_t)
dev_read_rand(mutt_t)
dev_read_urand(mutt_t)
diff --git a/policy/modules/contrib/pan.te b/policy/modules/contrib/pan.te
index 89bc61d0..48b07b85 100644
--- a/policy/modules/contrib/pan.te
+++ b/policy/modules/contrib/pan.te
@@ -51,7 +51,6 @@ corenet_sendrecv_innd_client_packets(pan_t)
corenet_tcp_connect_innd_port(pan_t)
corenet_tcp_sendrecv_generic_if(pan_t)
corenet_tcp_sendrecv_generic_node(pan_t)
-corenet_tcp_sendrecv_innd_port(pan_t)
domain_dontaudit_use_interactive_fds(pan_t)
diff --git a/policy/modules/contrib/rtorrent.te b/policy/modules/contrib/rtorrent.te
index e7f7c354..34fad1c5 100644
--- a/policy/modules/contrib/rtorrent.te
+++ b/policy/modules/contrib/rtorrent.te
@@ -49,7 +49,6 @@ allow rtorrent_t rtorrent_session_t:file map;
corenet_tcp_bind_generic_node(rtorrent_t)
corenet_tcp_bind_rtorrent_port(rtorrent_t)
corenet_tcp_connect_all_ports(rtorrent_t)
-corenet_tcp_sendrecv_all_ports(rtorrent_t)
domain_use_interactive_fds(rtorrent_t)
diff --git a/policy/modules/contrib/skype.te b/policy/modules/contrib/skype.te
index dc7f73ec..8a70ad35 100644
--- a/policy/modules/contrib/skype.te
+++ b/policy/modules/contrib/skype.te
@@ -81,7 +81,6 @@ corenet_tcp_bind_generic_port(skype_t)
corenet_tcp_connect_all_unreserved_ports(skype_t)
corenet_tcp_connect_generic_port(skype_t)
corenet_tcp_connect_http_port(skype_t)
-corenet_tcp_sendrecv_http_port(skype_t)
corenet_udp_bind_generic_node(skype_t)
corenet_udp_bind_generic_port(skype_t)