commit: 7a7d1e4a5e7e532b93be215172976e2fa2556e1e Author: Chris PeBenito <chpebeni <AT> linux <DOT> microsoft <DOT> com> AuthorDate: Thu Feb 29 15:14:01 2024 +0000 Commit: Kenton Groombridge <concord <AT> gentoo <DOT> org> CommitDate: Tue May 14 17:40:54 2024 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=7a7d1e4a
xen: Revoke kernel module loading permissions. This domain also calls kernel_request_load_module(), which should be sufficient. Signed-off-by: Chris PeBenito <chpebeni <AT> linux.microsoft.com> Signed-off-by: Kenton Groombridge <concord <AT> gentoo.org> policy/modules/system/xen.te | 1 - 1 file changed, 1 deletion(-) diff --git a/policy/modules/system/xen.te b/policy/modules/system/xen.te index 5311f3a34..d633dfef7 100644 --- a/policy/modules/system/xen.te +++ b/policy/modules/system/xen.te @@ -500,7 +500,6 @@ xen_stream_connect_xenstore(xm_t) can_exec(xm_t, xm_exec_t) -kernel_load_module(xm_t) kernel_request_load_module(xm_t) kernel_read_system_state(xm_t) kernel_read_network_state(xm_t)
