From cd57e255067f7bbba3d56be1af870f6074f62bb2 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Mon, 11 Nov 2024 17:32:08 +0100 Subject: [PATCH] Revert "Allow unconfined_t execute kmod in the kmod domain" This reverts commit 55262ef418d0 as it prevents insmod ./module.ko from working. Resolves: RHEL-54710 --- policy/modules/roles/unconfineduser.te | 4 ---- 1 file changed, 4 deletions(-) diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te index 585e05b81f..2f3ae2907a 100644 --- a/policy/modules/roles/unconfineduser.te +++ b/policy/modules/roles/unconfineduser.te @@ -340,10 +340,6 @@ optional_policy(` # mock_role(unconfined_r, unconfined_t) #') -optional_policy(` - modutils_domtrans_kmod(unconfined_t) -') - optional_policy(` mozilla_role_plugin(unconfined_r)