selinux: drop unused packet flow permissions
Eric Paris [Fri, 25 Feb 2011 20:39:20 +0000 (15:39 -0500)]
These permissions are not used and can be dropped in the kernel
definitions.

Suggested-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>

security/selinux/include/classmap.h

index 7ed3663..4227e5f 100644 (file)
@@ -132,8 +132,7 @@ struct security_class_mapping secclass_map[] = {
        { "appletalk_socket",
          { COMMON_SOCK_PERMS, NULL } },
        { "packet",
-         { "send", "recv", "relabelto", "flow_in", "flow_out",
-           "forward_in", "forward_out", NULL } },
+         { "send", "recv", "relabelto", "forward_in", "forward_out", NULL } },
        { "key",
          { "view", "read", "write", "search", "link", "setattr", "create",
            NULL } },