Removed the explicit allow call as this should not be necessary when …

…specifying kernel_list_proc, kernel_read_proc_symlinks, and kernel_read_network_state.
fedora-selinux · Jan 17, 2019 · 5f97609 · 5f97609
1 parent 1675767
commit 5f97609
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/mongodb.te b/mongodb.te
@@ -66,7 +66,6 @@ files_tmp_filetrans(mongod_t, mongod_tmp_t, { file dir sock_file })
 ## This means that we need to adjust the policy so that the mongod
 ## process is allowed to open and read /proc/net/netstat, which
 ## also typically has symlinks (e.g. /proc/net/snmp).
-allow mongod_t proc_net_t:file { open read };
 kernel_list_proc(mongod_t)
 kernel_read_proc_symlinks(mongod_t)