[PATCH 1/2] selinux: Drop useless interface file for pasta

[PATCH 1/2] selinux: Drop useless interface file for pasta

[Stefano Brivio]

This was meant to be an example, but I managed to add syntax errors
to it. Drop it altogether.

Reported-by: Carl G. <carlg@fedoraproject.org>
Link: https://bugzilla.redhat.com/show_bug.cgi?id=2182145
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
---
 contrib/selinux/pasta.if | 25 -------------------------
 1 file changed, 25 deletions(-)
 delete mode 100644 contrib/selinux/pasta.if

diff --git a/contrib/selinux/pasta.if b/contrib/selinux/pasta.if
deleted file mode 100644
index 149045a..0000000
--- a/contrib/selinux/pasta.if
+++ /dev/null
@@ -1,25 +0,0 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
-#
-# PASTA - Pack A Subtle Tap Abstraction
-#  for network namespace/tap device mode
-#
-# contrib/selinux/pasta.if - SELinux profile: Interface File for pasta
-#
-# Copyright (c) 2022 Red Hat GmbH
-# Author: Stefano Brivio <sbrivio@redhat.com>
-
-interface('passt_read_data','
-	gen_require(`
-		type passt_data_t;
-	')
-	allow $1 passt_t:dir { search add_name };
-	allow $1 passt_t:file { open read getattr };
-')
-
-interface('pasta_read_data','
-	gen_require(`
-		type pasta_data_t;
-	')
-	allow $1 pasta_t:dir { search add_name };
-	allow $1 pasta_t:file { open read getattr };
-')
-- 
2.39.2

[PATCH 2/2] fedora: Don't install useless SELinux interface file for pasta

[Stefano Brivio]

That was meant to be an example, and I just dropped it in the
previous commit -- passt.if should be more than enough as a possible
example.

Reported-by: Carl G. <carlg@fedoraproject.org>
Link: https://bugzilla.redhat.com/show_bug.cgi?id=2182145
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
---
 contrib/fedora/passt.spec | 2 --
 1 file changed, 2 deletions(-)

diff --git a/contrib/fedora/passt.spec b/contrib/fedora/passt.spec
index f6aa117..da1accb 100644
--- a/contrib/fedora/passt.spec
+++ b/contrib/fedora/passt.spec
@@ -65,7 +65,6 @@ make -f %{_datadir}/selinux/devel/Makefile
 install -p -m 644 -D passt.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/passt.pp
 install -p -m 644 -D passt.if %{buildroot}%{_datadir}/selinux/devel/include/contrib/passt.if
 install -p -m 644 -D pasta.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/pasta.pp
-install -p -m 644 -D pasta.if %{buildroot}%{_datadir}/selinux/devel/include/contrib/pasta.if
 popd
 
 %pre selinux
@@ -107,7 +106,6 @@ fi
 %{_datadir}/selinux/packages/%{name}/passt.pp
 %{_datadir}/selinux/devel/include/contrib/passt.if
 %{_datadir}/selinux/packages/%{name}/pasta.pp
-%{_datadir}/selinux/devel/include/contrib/pasta.if
 
 %changelog
 {{{ passt_git_changelog }}}
-- 
@@ -65,7 +65,6 @@ make -f %{_datadir}/selinux/devel/Makefile
 install -p -m 644 -D passt.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/passt.pp
 install -p -m 644 -D passt.if %{buildroot}%{_datadir}/selinux/devel/include/contrib/passt.if
 install -p -m 644 -D pasta.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/pasta.pp
-install -p -m 644 -D pasta.if %{buildroot}%{_datadir}/selinux/devel/include/contrib/pasta.if
 popd
 
 %pre selinux
@@ -107,7 +106,6 @@ fi
 %{_datadir}/selinux/packages/%{name}/passt.pp
 %{_datadir}/selinux/devel/include/contrib/passt.if
 %{_datadir}/selinux/packages/%{name}/pasta.pp
-%{_datadir}/selinux/devel/include/contrib/pasta.if
 
 %changelog
 {{{ passt_git_changelog }}}
-- 
2.39.2