Remove module for kudzu.

diff --git a/policy/modules/admin/bootloader.te b/policy/modules/admin/bootloader.te
index a10844b1645f63014863338efe1c40f2f1669138..ea0c493688a7177e71882144b7436c8b24cc6f3e 100644 (file)
--- a/policy/modules/admin/bootloader.te
+++ b/policy/modules/admin/bootloader.te
@@ -196,10 +196,6 @@ optional_policy(`
        gpm_getattr_gpmctl(bootloader_t)
 ')
 
-optional_policy(`
-       kudzu_domtrans(bootloader_t)
-')
-
 optional_policy(`
        dev_rw_lvm_control(bootloader_t)
 

diff --git a/policy/modules/admin/ddcprobe.te b/policy/modules/admin/ddcprobe.te
index 3cbfffb673a24813434f577e2bceb0c12d231bb5..42a59b0ac94ded1d4048808aff19a1ac4df79a21 100644 (file)
--- a/policy/modules/admin/ddcprobe.te
+++ b/policy/modules/admin/ddcprobe.te
@@ -45,11 +45,6 @@ miscfiles_read_localization(ddcprobe_t)
 userdom_use_inherited_user_terminals(ddcprobe_t)
 userdom_use_all_users_fds(ddcprobe_t)
 
-optional_policy(`
-       #reh why? this does not seem even necessary to function properly
-       kudzu_getattr_exec_files(ddcprobe_t)
-')
-
 optional_policy(`
        modutils_read_module_deps(ddcprobe_t)
 ')

diff --git a/policy/modules/admin/kudzu.fc b/policy/modules/admin/kudzu.fc
deleted file mode 100644 (file)
index 3317a0c..0000000
--- a/policy/modules/admin/kudzu.fc
+++ /dev/null
@@ -1,6 +0,0 @@
-
-/sbin/kmodule  --      gen_context(system_u:object_r:kudzu_exec_t,s0)
-/sbin/kudzu    --      gen_context(system_u:object_r:kudzu_exec_t,s0)
-
-/usr/sbin/kmodule --   gen_context(system_u:object_r:kudzu_exec_t,s0)
-/usr/sbin/kudzu        --      gen_context(system_u:object_r:kudzu_exec_t,s0)

diff --git a/policy/modules/admin/kudzu.if b/policy/modules/admin/kudzu.if
deleted file mode 100644 (file)
index 65bcaff..0000000
--- a/policy/modules/admin/kudzu.if
+++ /dev/null
@@ -1,64 +0,0 @@
-## <summary>Hardware detection and configuration tools</summary>
-
-########################################
-## <summary>
-##     Execute kudzu in the kudzu domain.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed to transition.
-##     </summary>
-## </param>
-#
-interface(`kudzu_domtrans',`
-       gen_require(`
-               type kudzu_t, kudzu_exec_t;
-       ')
-
-       domtrans_pattern($1, kudzu_exec_t, kudzu_t)
-')
-
-########################################
-## <summary>
-##     Execute kudzu in the kudzu domain, and
-##     allow the specified role the kudzu domain.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed to transition.
-##     </summary>
-## </param>
-## <param name="role">
-##     <summary>
-##     Role allowed access.
-##     </summary>
-## </param>
-## <rolecap/>
-#
-interface(`kudzu_run',`
-       gen_require(`
-               type kudzu_t;
-       ')
-
-       kudzu_domtrans($1)
-       role $2 types kudzu_t;
-')
-
-########################################
-## <summary>
-##     Get attributes of kudzu executable.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed access.
-##     </summary>
-## </param>
-#
-# cjp: added for ddcprobe
-interface(`kudzu_getattr_exec_files',`
-       gen_require(`
-               type kudzu_exec_t;
-       ')
-
-       allow $1 kudzu_exec_t:file getattr;
-')

diff --git a/policy/modules/admin/kudzu.te b/policy/modules/admin/kudzu.te
deleted file mode 100644 (file)
index 9143343..0000000
--- a/policy/modules/admin/kudzu.te
+++ /dev/null
@@ -1,143 +0,0 @@
-policy_module(kudzu, 1.8.0)
-
-########################################
-#
-# Declarations
-#
-
-type kudzu_t;
-type kudzu_exec_t;
-init_system_domain(kudzu_t, kudzu_exec_t)
-
-type kudzu_tmp_t;
-files_tmp_file(kudzu_tmp_t)
-
-type kudzu_var_run_t;
-files_pid_file(kudzu_var_run_t)
-
-########################################
-#
-# Local policy
-#
-
-allow kudzu_t self:capability { dac_override sys_admin sys_rawio net_admin sys_tty_config mknod };
-dontaudit kudzu_t self:capability sys_tty_config;
-allow kudzu_t self:process { signal_perms execmem };
-allow kudzu_t self:fifo_file rw_fifo_file_perms;
-allow kudzu_t self:unix_stream_socket { connectto create_stream_socket_perms };
-allow kudzu_t self:unix_dgram_socket create_socket_perms;
-allow kudzu_t self:udp_socket { create ioctl };
-
-manage_dirs_pattern(kudzu_t, kudzu_tmp_t, kudzu_tmp_t)
-manage_files_pattern(kudzu_t, kudzu_tmp_t, kudzu_tmp_t)
-manage_chr_files_pattern(kudzu_t, kudzu_tmp_t, kudzu_tmp_t)
-files_tmp_filetrans(kudzu_t, kudzu_tmp_t, { file dir chr_file })
-
-manage_dirs_pattern(kudzu_t, kudzu_var_run_t, kudzu_var_run_t)
-manage_files_pattern(kudzu_t, kudzu_var_run_t, kudzu_var_run_t)
-files_pid_filetrans(kudzu_t, kudzu_var_run_t, file)
-
-kernel_change_ring_buffer_level(kudzu_t)
-kernel_list_proc(kudzu_t)
-kernel_read_device_sysctls(kudzu_t)
-kernel_read_kernel_sysctls(kudzu_t)
-kernel_read_proc_symlinks(kudzu_t)
-kernel_read_network_state(kudzu_t)
-kernel_read_system_state(kudzu_t)
-kernel_rw_hotplug_sysctls(kudzu_t)
-kernel_rw_kernel_sysctl(kudzu_t)
-
-files_read_kernel_modules(kudzu_t)
-
-dev_list_sysfs(kudzu_t)
-dev_read_usbfs(kudzu_t)
-dev_read_sysfs(kudzu_t)
-dev_rx_raw_memory(kudzu_t)
-dev_wx_raw_memory(kudzu_t)
-dev_rw_mouse(kudzu_t)
-dev_rwx_zero(kudzu_t)
-
-fs_search_auto_mountpoints(kudzu_t)
-fs_search_ramfs(kudzu_t)
-fs_write_ramfs_sockets(kudzu_t)
-
-mls_file_read_all_levels(kudzu_t)
-mls_file_write_all_levels(kudzu_t)
-
-storage_read_scsi_generic(kudzu_t)
-storage_read_tape(kudzu_t)
-storage_raw_write_fixed_disk(kudzu_t)
-storage_raw_write_removable_device(kudzu_t)
-storage_raw_read_fixed_disk(kudzu_t)
-storage_raw_read_removable_device(kudzu_t)
-
-term_dontaudit_use_console(kudzu_t)
-# so it can write messages to the console
-term_use_unallocated_ttys(kudzu_t)
-
-corecmd_exec_all_executables(kudzu_t)
-
-domain_use_interactive_fds(kudzu_t)
-
-files_search_var(kudzu_t)
-files_search_locks(kudzu_t)
-files_manage_etc_files(kudzu_t)
-files_manage_etc_runtime_files(kudzu_t)
-files_etc_filetrans_etc_runtime(kudzu_t, file)
-files_manage_mnt_files(kudzu_t)
-files_manage_mnt_symlinks(kudzu_t)
-files_dontaudit_search_src(kudzu_t)
-# Read /usr/share/hwdata/.* and /usr/share/terminfo/l/linux
-files_read_usr_files(kudzu_t)
-# for /etc/sysconfig/hwconf - probably need a new type
-files_rw_etc_runtime_files(kudzu_t)
-# for file systems that are not yet mounted
-files_dontaudit_search_isid_type_dirs(kudzu_t)
-
-init_use_fds(kudzu_t)
-init_use_script_ptys(kudzu_t)
-init_stream_connect_script(kudzu_t)
-init_read_state(kudzu_t)
-init_ptrace(kudzu_t)
-# kudzu will telinit to make init re-read
-# the inittab after configuring serial consoles
-init_telinit(kudzu_t)
-
-# Read /usr/lib/gconv/gconv-modules.*
-libs_read_lib_files(kudzu_t)
-
-logging_send_syslog_msg(kudzu_t)
-
-miscfiles_read_hwdata(kudzu_t)
-miscfiles_read_localization(kudzu_t)
-
-
-sysnet_read_config(kudzu_t)
-
-userdom_use_inherited_user_terminals(kudzu_t)
-userdom_dontaudit_use_unpriv_user_fds(kudzu_t)
-userdom_search_user_home_dirs(kudzu_t)
-
-optional_policy(`
-       gpm_getattr_gpmctl(kudzu_t)
-')
-
-optional_policy(`
-       modutils_read_module_config(kudzu_t)
-       modutils_read_module_deps(kudzu_t)
-       modutils_rename_module_config(kudzu_t)
-       modutils_delete_module_config(kudzu_t)
-       modutils_domtrans_insmod(kudzu_t)
-')
-
-optional_policy(`
-       seutil_sigchld_newrole(kudzu_t)
-')
-
-optional_policy(`
-       udev_read_db(kudzu_t)
-')
-
-optional_policy(`
-       unconfined_domtrans(kudzu_t)
-')

diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
index a06ae86527079b7369435e283295cb80ad9f015b..615a74e89dc56254d88d611849cd50c14e9bcd24 100644 (file)
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@@ -228,10 +228,6 @@ optional_policy(`
        kerberos_filetrans_named_content(sysadm_t)
 ')
 
-optional_policy(`
-       kudzu_run(sysadm_t, sysadm_r)
-')
-
 optional_policy(`
        libs_run_ldconfig(sysadm_t, sysadm_r)
 ')