Skip to content
Snippets Groups Projects
Commit 1d18ef44 authored by Nick Kralevich's avatar Nick Kralevich Committed by android-build-merger
Browse files

access_vectors: Remove unused permission definitions

am: 11dc03e5

Change-Id: Ie2c7f871c47d378cc3b8399e174b229439511452
parents 2c2ee695 11dc03e5
No related branches found
No related tags found
No related merge requests found
...@@ -24,7 +24,6 @@ common file ...@@ -24,7 +24,6 @@ common file
link link
rename rename
execute execute
swapon
quotaon quotaon
mounton mounton
} }
...@@ -57,8 +56,6 @@ common socket ...@@ -57,8 +56,6 @@ common socket
shutdown shutdown
recvfrom recvfrom
sendto sendto
recv_msg
send_msg
name_bind name_bind
} }
...@@ -97,7 +94,6 @@ class filesystem ...@@ -97,7 +94,6 @@ class filesystem
getattr getattr
relabelfrom relabelfrom
relabelto relabelto
transition
associate associate
quotamod quotamod
quotaget quotaget
...@@ -184,9 +180,6 @@ inherits socket ...@@ -184,9 +180,6 @@ inherits socket
class tcp_socket class tcp_socket
inherits socket inherits socket
{ {
connectto
newconn
acceptfrom
node_bind node_bind
name_connect name_connect
} }
...@@ -205,29 +198,12 @@ inherits socket ...@@ -205,29 +198,12 @@ inherits socket
class node class node
{ {
tcp_recv
tcp_send
udp_recv
udp_send
rawip_recv
rawip_send
enforce_dest
dccp_recv
dccp_send
recvfrom recvfrom
sendto sendto
} }
class netif class netif
{ {
tcp_recv
tcp_send
udp_recv
udp_send
rawip_recv
rawip_send
dccp_recv
dccp_send
ingress ingress
egress egress
} }
...@@ -245,8 +221,6 @@ class unix_stream_socket ...@@ -245,8 +221,6 @@ class unix_stream_socket
inherits socket inherits socket
{ {
connectto connectto
newconn
acceptfrom
} }
class unix_dgram_socket class unix_dgram_socket
......
...@@ -237,7 +237,7 @@ define(`selinux_check_access', ` ...@@ -237,7 +237,7 @@ define(`selinux_check_access', `
r_dir_file($1, selinuxfs) r_dir_file($1, selinuxfs)
allow $1 selinuxfs:file w_file_perms; allow $1 selinuxfs:file w_file_perms;
allow $1 kernel:security compute_av; allow $1 kernel:security compute_av;
allow $1 self:netlink_selinux_socket { read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto recv_msg send_msg name_bind }; allow $1 self:netlink_selinux_socket { read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind };
') ')
##################################### #####################################
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment