[selinux-policy: 2993/3172] Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:26:23 UTC 2010


commit ba6db03dc0d0651316ed07e1da09774bb2324bd8
Author: Dominick Grift <domg472 at gmail.com>
Date:   Thu Sep 16 11:24:30 2010 +0200

    Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.

 policy/modules/services/sendmail.if |    4 ----
 1 files changed, 0 insertions(+), 4 deletions(-)
---
diff --git a/policy/modules/services/sendmail.if b/policy/modules/services/sendmail.if
index 4f7eb51..1e9cb00 100644
--- a/policy/modules/services/sendmail.if
+++ b/policy/modules/services/sendmail.if
@@ -51,10 +51,6 @@ interface(`sendmail_domtrans',`
 	')
 
 	mta_sendmail_domtrans($1, sendmail_t)
-
-	allow sendmail_t $1:fd use;
-	allow sendmail_t $1:fifo_file rw_file_perms;
-	allow sendmail_t $1:process sigchld;
 ')
 
 #######################################


More information about the scm-commits mailing list