• K
    selinux: remove dead code in type_attribute_bounds_av() · 7d52a155
    KaiGai Kohei 提交于
    This patch removes dead code in type_attribute_bounds_av().
    
    Due to the historical reason, the type boundary feature is delivered
    from hierarchical types in libsepol, it has supported boundary features
    both of subject type (domain; in most cases) and target type.
    
    However, we don't have any actual use cases in bounded target types,
    and it tended to make conceptual confusion.
    So, this patch removes the dead code to apply boundary checks on the
    target types. I makes clear the TYPEBOUNDS restricts privileges of
    a certain domain bounded to any other domain.
    Signed-off-by: NKaiGai Kohei <kaigai@ak.jp.nec.com>
    Acked-by: NStephen Smalley <sds@tycho.nsa.gov>
    
    --
     security/selinux/ss/services.c |   43 +++------------------------------------
     1 files changed, 4 insertions(+), 39 deletions(-)
    Signed-off-by: NJames Morris <jmorris@namei.org>
    7d52a155
services.c 69.4 KB