diff --git a/Changelog b/Changelog index 1bdd76e7..5aea1d94 100644 --- a/Changelog +++ b/Changelog @@ -1,3 +1,5 @@ +- Association polmatch MLS constraint making unlabeled_t an exception + is no longer needed, patch from Venkat Yekkirala. - Context contains checking for PAM and cron from James Antill. - Add a reload target to Modules.devel and change the load target to only insert modules that were changed. diff --git a/policy/mls b/policy/mls index bdca162b..859ebaaf 100644 --- a/policy/mls +++ b/policy/mls @@ -585,8 +585,7 @@ mlsconstrain association { sendto } ( t2 == unlabeled_t )); mlsconstrain association { polmatch } - ((( l1 dom l2 ) and ( h1 domby h2 )) or - ( t2 == unlabeled_t )); + (( l1 dom l2 ) and ( h1 domby h2 ));