SELinux: remove current object class and permission validation mechanism
authorChad Sellers <csellers@tresys.com>
Mon, 6 Nov 2006 17:38:15 +0000 (12:38 -0500)
committerJames Morris <jmorris@namei.org>
Tue, 28 Nov 2006 17:04:35 +0000 (12:04 -0500)
Removes the current SELinux object class and permission validation code,
as the current code makes it impossible to change or remove object classes
and permissions on a running system. Additionally, the current code does
not actually validate that the classes and permissions are correct, but
instead merely validates that they do not change between policy reloads.

Signed-off-by: Chad Sellers <csellers@tresys.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>

No differences found