commit: aa9b7bc301b4d7015743cdda1a29395588ed1200
Author: Chris PeBenito <chpebeni <AT> linux <DOT> microsoft <DOT> com>
AuthorDate: Thu Jun 23 19:24:14 2022 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Sep 3 18:41:55 2022 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=aa9b7bc3
mcs: Remove duplicate node_bind constraint.
Signed-off-by: Chris PeBenito <chpebeni <AT> linux.microsoft.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/mcs | 3 ---
1 file changed, 3 deletions(-)
diff --git a/policy/mcs b/policy/mcs
index fa505d3d..c3d76d09 100644
--- a/policy/mcs
+++ b/policy/mcs
@@ -162,9 +162,6 @@ mlsconstrain db_language { drop getattr setattr relabelfrom
execute }
mlsconstrain db_blob { drop getattr setattr relabelfrom read write import
export }
(( h1 dom h2 ) or ( t1 != mcs_constrained_type ));
-mlsconstrain { tcp_socket udp_socket rawip_socket } node_bind
- (( h1 dom h2 ) or ( t1 != mcs_constrained_type ));
-
# The node recvfrom/sendto ops, the recvfrom permission is a "write" operation
# because the subject in this particular case is the remote domain which is
# writing data out the network node which is acting as the object
