From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 05 Oct 2010 13:41:34 -0400
Subject: [refpolicy] [ patch 02/44] bootloader: unused.
In-Reply-To: <1286216636-28449-4-git-send-email-domg472@gmail.com>
References: <1286216636-28449-1-git-send-email-domg472@gmail.com>
	<1286216636-28449-4-git-send-email-domg472@gmail.com>
Message-ID: <4CAB634E.6080204@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 10/04/10 14:23, Dominick Grift wrote:
>
> Signed-off-by: Dominick Grift<domg472@gmail.com>
> ---
> :100644 100644 ebe8570... 2242ecd... M	policy/modules/admin/bootloader.if
>   policy/modules/admin/bootloader.if |   38 ------------------------------------
>   1 files changed, 0 insertions(+), 38 deletions(-)

I'll make a blanket statement on all of the patches that are like this. 
  We're not removing unused interfaces.  Its good to have interfaces 
available for 3rd parties to use, so they don't have to resort to using 
raw allow rules and require blocks.


> diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if
> index ebe8570..2242ecd 100644
> --- a/policy/modules/admin/bootloader.if
> +++ b/policy/modules/admin/bootloader.if
> @@ -52,44 +52,6 @@ interface(`bootloader_run',`
>
>   ########################################
>   ##<summary>
> -##	Read the bootloader configuration file.
> -##</summary>
> -##<param name="domain">
> -##	<summary>
> -##	Domain allowed access.
> -##	</summary>
> -##</param>
> -#
> -interface(`bootloader_read_config',`
> -	gen_require(`
> -		type bootloader_etc_t;
> -	')
> -
> -	allow $1 bootloader_etc_t:file read_file_perms;
> -')
> -
> -########################################
> -##<summary>
> -##	Read and write the bootloader
> -##	configuration file.
> -##</summary>
> -##<param name="domain">
> -##	<summary>
> -##	Domain allowed access.
> -##	</summary>
> -##</param>
> -##<rolecap/>
> -#
> -interface(`bootloader_rw_config',`
> -	gen_require(`
> -		type bootloader_etc_t;
> -	')
> -
> -	allow $1 bootloader_etc_t:file rw_file_perms;
> -')
> -
> -########################################
> -##<summary>
>   ##	Read and write the bootloader
>   ##	temporary data in /tmp.
>   ##</summary>


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com