From 1ea98d0407e27831a1f12b2dc0287e313ebd0d6f Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Apr 18 2005 20:27:16 +0000 Subject: remove relabeling privilege for now --- diff --git a/refpolicy/policy/modules/kernel/kernel.if b/refpolicy/policy/modules/kernel/kernel.if index 2682a18..5b5ec85 100644 --- a/refpolicy/policy/modules/kernel/kernel.if +++ b/refpolicy/policy/modules/kernel/kernel.if @@ -84,19 +84,6 @@ class capability sys_module; ######################################## # -# kernel_relabeling_privilege(domain,[`optional']) -# -define(`kernel_relabeling_privilege',` -requires_block_template(kernel_relabeling_privilege_depend,$2) -typeattribute $1 can_relabel; -') - -define(`kernel_relabeling_privilege_depend',` -attribute can_relabel; -') - -######################################## -# # kernel_kill_unlabeled_process(domain,[`optional']) # define(`kernel_kill_unlabeled_process',` diff --git a/refpolicy/policy/modules/kernel/terminal.if b/refpolicy/policy/modules/kernel/terminal.if index 3a421ea..9ebc07b 100644 --- a/refpolicy/policy/modules/kernel/terminal.if +++ b/refpolicy/policy/modules/kernel/terminal.if @@ -79,7 +79,6 @@ devices_list_device_nodes_depend define(`terminal_reset_labels',` requires_block_template(terminal_reset_labels_depend,$2) devices_list_device_nodes($1,optional) -kernel_relabeling_privilege($1,optional) allow $1 ttynode:chr_file relabelfrom; allow $1 tty_device_t:chr_file relabelto; ')