KaiGai Kohei 7d52a155e3 selinux: remove dead code in type_attribute_bounds_av() ... This patch removes dead code in type_attribute_bounds_av(). Due to the historical reason, the type boundary feature is delivered from hierarchical types in libsepol, it has supported boundary features both of subject type (domain; in most cases) and target type. However, we don't have any actual use cases in bounded target types, and it tended to make conceptual confusion. So, this patch removes the dead code to apply boundary checks on the target types. I makes clear the TYPEBOUNDS restricts privileges of a certain domain bounded to any other domain. Signed-off-by: KaiGai Kohei <kaigai@ak.jp.nec.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> -- security/selinux/ss/services.c | 43 +++------------------------------------ 1 files changed, 4 insertions(+), 39 deletions(-) Signed-off-by: James Morris <jmorris@namei.org>		2010-01-25 08:31:38 +11:00
..
avtab.c
avtab.h
conditional.c
conditional.h
constraint.h
context.h
ebitmap.c
ebitmap.h
hashtab.c
hashtab.h
Makefile	selinux: generate flask headers during kernel build	2009-10-07 21:56:44 +11:00
mls_types.h
mls.c	selinux: convert range transition list to a hashtab	2010-01-25 08:29:05 +11:00
mls.h
policydb.c	selinux: convert range transition list to a hashtab	2010-01-25 08:29:05 +11:00
policydb.h	selinux: convert range transition list to a hashtab	2010-01-25 08:29:05 +11:00
services.c	selinux: remove dead code in type_attribute_bounds_av()	2010-01-25 08:31:38 +11:00
services.h
sidtab.c
sidtab.h
symtab.c
symtab.h