diff --git a/refpolicy/Makefile b/refpolicy/Makefile index 580ca622..1615abc4 100644 --- a/refpolicy/Makefile +++ b/refpolicy/Makefile @@ -158,7 +158,8 @@ tmp/generated_definitions.conf: $(ALL_MODULES) $(ALL_TE_FILES) $(BASE_MODULE)/co $(QUIET) for i in $(notdir $(ALL_TE_FILES)); do \ echo "define(\`$$i')" >> $@ ;\ done - $(QUIET) m4 $(M4PARAM) -D interface_pass $(BASE_MODULE)/global.if $(BASE_MODULE)/corenetwork.if $(BASE_MODULE)/corenetwork.te \ + $(QUIET) grep -E "^network_(interface|node|port)\(.*\)" $(BASE_MODULE)/corenetwork.te \ + | m4 $(M4PARAM) -D interface_pass $(BASE_MODULE)/global.if $(BASE_MODULE)/corenetwork.if - \ | sed -e 's/dollarsone/\$$1/g' -e 's/dollarszero/\$$0/g' >> $@ tmp/all_interfaces.conf: $(ALL_INTERFACES) diff --git a/refpolicy/policy/modules/kernel/corenetwork.if b/refpolicy/policy/modules/kernel/corenetwork.if index d7723915..68ea75de 100644 --- a/refpolicy/policy/modules/kernel/corenetwork.if +++ b/refpolicy/policy/modules/kernel/corenetwork.if @@ -790,15 +790,6 @@ class udp_socket name_bind; # ######################################## -# dont generate anything but macros on this pass -ifdef(`interface_pass',` -define(`allow',`dnl') -define(`type',`dnl') -define(`attribute',`dnl') -define(`portcon',`dnl') -define(`devices_make_device_node',`dnl') -') - ######################################## # # Network Interface generated macros