Skip to content

Commit

Permalink
Remove socket from socket_class_set
Browse files Browse the repository at this point in the history
It seems socket is not used as a security class any longer, just as a
common prefix which is then inherited by particular socket classes.
  • Loading branch information
zpytela committed Jan 30, 2023
1 parent e2db85b commit 03e7fcc
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion policy/modules/kernel/domain.te
Original file line number Diff line number Diff line change
Expand Up @@ -267,7 +267,7 @@ allow unconfined_domain_type self:lnk_file setattr;

# Use/sendto/connectto sockets created by any domain.
allow unconfined_domain_type self:cap_userns all_cap_userns_perms;
allow unconfined_domain_type domain:{ socket_class_set socket } *;
allow unconfined_domain_type domain:socket_class_set *;

allow unconfined_domain_type domain:system all_system_perms;
# Use descriptors and pipes created by any domain.
Expand Down

0 comments on commit 03e7fcc

Please sign in to comment.