No longer use deprecated MLS interfaces
PATCH 1/1 No longer use deprecated MLS interfaces
Since commit 2d0c9cec mls_file_read_up and mls_file_write_down interfaces are deprecated even though they are still present.
Replace mls_file_read_up with mls_file_read_all_levels and mls_file_write_down with mls_file_write_all_levels.
--- policy/modules/kernel/kernel.te | 4 ++-- policy/modules/roles/secadm.te | 2 +- policy/modules/roles/sysadm.te | 2 +- policy/modules/system/init.te | 6 +++--- policy/modules/system/setrans.te | 2 +- policy/modules/system/udev.te | 2 +- policy/modules/system/userdomain.if | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-)
policy/modules/kernel/kernel.te +2 -2
@@ -289,8 +289,8 @@ files_read_usr_files(kernel_t) mcs_process_set_categories(kernel_t) -mls_process_read_up(kernel_t) -mls_process_write_down(kernel_t) +mls_process_read_all_levels(kernel_t) +mls_process_write_all_levels(kernel_t) mls_file_write_all_levels(kernel_t) mls_file_read_all_levels(kernel_t)
policy/modules/roles/secadm.te +1 -1
@@ -23,7 +23,7 @@ dev_relabel_all_dev_nodes(secadm_t) domain_obj_id_change_exemption(secadm_t) -mls_process_read_up(secadm_t) +mls_process_read_all_levels(secadm_t) mls_file_read_all_levels(secadm_t) mls_file_write_all_levels(secadm_t) mls_file_upgrade(secadm_t)
policy/modules/roles/sysadm.te +1 -1
@@ -27,7 +27,7 @@ ifndef(`enable_mls',` corecmd_exec_shell(sysadm_t) -mls_process_read_up(sysadm_t) +mls_process_read_all_levels(sysadm_t) ubac_process_exempt(sysadm_t) ubac_file_exempt(sysadm_t)
policy/modules/system/init.te +3 -3
@@ -154,7 +154,7 @@ mcs_killall(init_t) mls_file_read_all_levels(init_t) mls_file_write_all_levels(init_t) -mls_process_write_down(init_t) +mls_process_write_all_levels(init_t) mls_fd_use_all_levels(init_t) selinux_set_all_booleans(init_t)
@@ -385,8 +385,8 @@ mcs_process_set_categories(initrc_t) mls_file_read_all_levels(initrc_t) mls_file_write_all_levels(initrc_t) -mls_process_read_up(initrc_t) -mls_process_write_down(initrc_t) +mls_process_read_all_levels(initrc_t) +mls_process_write_all_levels(initrc_t) mls_rangetrans_source(initrc_t) mls_fd_share_all_levels(initrc_t)
policy/modules/system/setrans.te +1 -1
@@ -68,7 +68,7 @@ mls_file_read_all_levels(setrans_t) mls_file_write_all_levels(setrans_t) mls_net_receive_all_levels(setrans_t) mls_socket_write_all_levels(setrans_t) -mls_process_read_up(setrans_t) +mls_process_read_all_levels(setrans_t) mls_socket_read_all_levels(setrans_t) selinux_compute_access_vector(setrans_t)
policy/modules/system/udev.te +1 -1
@@ -130,7 +130,7 @@ mls_file_read_all_levels(udev_t) mls_file_write_all_levels(udev_t) mls_file_upgrade(udev_t) mls_file_downgrade(udev_t) -mls_process_write_down(udev_t) +mls_process_write_all_levels(udev_t) selinux_get_fs_mount(udev_t) selinux_validate_context(udev_t)
policy/modules/system/userdomain.if +1 -1
@@ -1256,7 +1256,7 @@ template(`userdom_security_admin_template',` # Necessary for managing /boot/efi fs_manage_dos_files($1) - mls_process_read_up($1) + mls_process_read_all_levels($1) mls_file_read_all_levels($1) mls_file_upgrade($1) mls_file_downgrade($1)
Signature · 1 line
1.9.2
PATCH 1/1 No longer use deprecated MLS interfaces
Quoted 5 lines · Nicolas Iooss
Since commit
2d0c9cecmls_file_read_upandmls_file_write_downinterfaces are deprecated even though they are still present.Replace
mls_file_read_upwithmls_file_read_all_levelsandmls_file_write_downwithmls_file_write_all_levels.
I thought I had fixed the deprecated interface usage a long time ago. Thanks for catching these.
Merged.
Quoted 115 lines
--- policy/modules/kernel/kernel.te | 4 ++-- policy/modules/roles/secadm.te | 2 +- policy/modules/roles/sysadm.te | 2 +- policy/modules/system/init.te | 6 +++--- policy/modules/system/setrans.te | 2 +- policy/modules/system/udev.te | 2 +- policy/modules/system/userdomain.if | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-)policy/modules/kernel/kernel.te +2
-2@@ -289,8 +289,8 @@ files_read_usr_files(kernel_t) mcs_process_set_categories(kernel_t) -mls_process_read_up(kernel_t) -mls_process_write_down(kernel_t) +mls_process_read_all_levels(kernel_t) +mls_process_write_all_levels(kernel_t) mls_file_write_all_levels(kernel_t) mls_file_read_all_levels(kernel_t)policy/modules/roles/secadm.te +1
-1@@ -23,7 +23,7 @@ dev_relabel_all_dev_nodes(secadm_t) domain_obj_id_change_exemption(secadm_t) -mls_process_read_up(secadm_t) +mls_process_read_all_levels(secadm_t) mls_file_read_all_levels(secadm_t) mls_file_write_all_levels(secadm_t) mls_file_upgrade(secadm_t)policy/modules/roles/sysadm.te +1
-1@@ -27,7 +27,7 @@ ifndef(`enable_mls',` corecmd_exec_shell(sysadm_t) -mls_process_read_up(sysadm_t) +mls_process_read_all_levels(sysadm_t) ubac_process_exempt(sysadm_t) ubac_file_exempt(sysadm_t)policy/modules/system/init.te +3
-3@@ -154,7 +154,7 @@ mcs_killall(init_t) mls_file_read_all_levels(init_t) mls_file_write_all_levels(init_t) -mls_process_write_down(init_t) +mls_process_write_all_levels(init_t) mls_fd_use_all_levels(init_t) selinux_set_all_booleans(init_t)@@ -385,8 +385,8 @@ mcs_process_set_categories(initrc_t) mls_file_read_all_levels(initrc_t) mls_file_write_all_levels(initrc_t) -mls_process_read_up(initrc_t) -mls_process_write_down(initrc_t) +mls_process_read_all_levels(initrc_t) +mls_process_write_all_levels(initrc_t) mls_rangetrans_source(initrc_t) mls_fd_share_all_levels(initrc_t)policy/modules/system/setrans.te +1
-1@@ -68,7 +68,7 @@ mls_file_read_all_levels(setrans_t) mls_file_write_all_levels(setrans_t) mls_net_receive_all_levels(setrans_t) mls_socket_write_all_levels(setrans_t) -mls_process_read_up(setrans_t) +mls_process_read_all_levels(setrans_t) mls_socket_read_all_levels(setrans_t) selinux_compute_access_vector(setrans_t)policy/modules/system/udev.te +1
-1@@ -130,7 +130,7 @@ mls_file_read_all_levels(udev_t) mls_file_write_all_levels(udev_t) mls_file_upgrade(udev_t) mls_file_downgrade(udev_t) -mls_process_write_down(udev_t) +mls_process_write_all_levels(udev_t) selinux_get_fs_mount(udev_t) selinux_validate_context(udev_t)policy/modules/system/userdomain.if +1
-1@@ -1256,7 +1256,7 @@ template(`userdom_security_admin_template',` # Necessary for managing /boot/efi fs_manage_dos_files($1) - mls_process_read_up($1) + mls_process_read_all_levels($1) mls_file_read_all_levels($1) mls_file_upgrade($1) mls_file_downgrade($1)
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com