[selinux-policy: 3070/3172] Redundant: Included files_search_var_lib already permits access to list generic var directories.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:33:07 UTC 2010


commit 7bc4e83ea90e256c8f1d673c6e460280bee75e80
Author: Dominick Grift <domg472 at gmail.com>
Date:   Tue Sep 21 12:22:50 2010 +0200

    Redundant: Included files_search_var_lib already permits access to list generic var directories.

 policy/modules/services/samba.if |    4 ----
 1 files changed, 0 insertions(+), 4 deletions(-)
---
diff --git a/policy/modules/services/samba.if b/policy/modules/services/samba.if
index aace276..24d46af 100644
--- a/policy/modules/services/samba.if
+++ b/policy/modules/services/samba.if
@@ -391,7 +391,6 @@ interface(`samba_search_var',`
 		type samba_var_t;
 	')
 
-	files_search_var($1)
 	files_search_var_lib($1)
 	allow $1 samba_var_t:dir search_dir_perms;
 ')
@@ -412,7 +411,6 @@ interface(`samba_read_var_files',`
 		type samba_var_t;
 	')
 
-	files_search_var($1)
 	files_search_var_lib($1)
 	read_files_pattern($1, samba_var_t, samba_var_t)
 ')
@@ -452,7 +450,6 @@ interface(`samba_rw_var_files',`
 		type samba_var_t;
 	')
 
-	files_search_var($1)
 	files_search_var_lib($1)
 	rw_files_pattern($1, samba_var_t, samba_var_t)
 ')
@@ -473,7 +470,6 @@ interface(`samba_manage_var_files',`
 		type samba_var_t;
 	')
 
-	files_search_var($1)
 	files_search_var_lib($1)
 	manage_files_pattern($1, samba_var_t, samba_var_t)
 	manage_lnk_files_pattern($1, samba_var_t, samba_var_t)


More information about the scm-commits mailing list