50 lines
2.6 KiB
Diff
50 lines
2.6 KiB
Diff
|
From c33aa1f2bdb74f689bd54565e363fa67f3aa148f Mon Sep 17 00:00:00 2001
|
||
|
|
From: Ondrej Mosnacek <omosnace@redhat.com>
|
||
|
|
Date: Thu, 18 Feb 2021 09:50:50 +0100
|
||
|
|
Subject: [PATCH] iptables.fc: Remove duplicate file context entries
|
||
|
|
|
||
|
|
There is an quivalency rule /sbin -> /usr/sbin so these are redundant.
|
||
|
|
A few entries were missing in the /usr/sbin block - add them to avoid
|
||
|
|
regressions.
|
||
|
|
|
||
|
|
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
|
||
|
|
---
|
||
|
|
policy/modules/system/iptables.fc | 20 ++------------------
|
||
|
|
1 file changed, 2 insertions(+), 18 deletions(-)
|
||
|
|
|
||
|
|
diff --git a/policy/modules/system/iptables.fc b/policy/modules/system/iptables.fc
|
||
|
|
index d8161fc..639a59b 100644
|
||
|
|
--- a/policy/modules/system/iptables.fc
|
||
|
|
+++ b/policy/modules/system/iptables.fc
|
||
|
|
@@ -12,25 +12,9 @@
|
||
|
|
|
||
|
|
/usr/libexec/ipset -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
|
||
|
|
-/sbin/arptables -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/arptables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/arptables-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ebtables -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ebtables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ip6?tables.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ip6?tables-restore.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ip6?tables-multi.* -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ipset -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ipvsadm -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ipvsadm-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/ipvsadm-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/nft -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/xtables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/xtables-legacy-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-/sbin/xtables-nft-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
-
|
||
|
|
/usr/sbin/arptables -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
+/usr/sbin/arptables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
+/usr/sbin/arptables-save -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
/usr/sbin/conntrack -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
/usr/sbin/ebtables -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
/usr/sbin/ebtables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0)
|
||
|
|
--
|
||
|
|
1.8.3.1
|
||
|
|
|