Remove allow_execmem from targeted policy domain_base_type().
This commit is contained in:
parent
a395250983
commit
3eea5516f5
|
@ -1,3 +1,4 @@
|
||||||
|
- Remove allow_execmem from targeted policy domain_base_type().
|
||||||
- Add users_extra and seusers support.
|
- Add users_extra and seusers support.
|
||||||
- Postfix fixes from Serge Hallyn.
|
- Postfix fixes from Serge Hallyn.
|
||||||
- Run python and shell directly to interpret scripts so policy
|
- Run python and shell directly to interpret scripts so policy
|
||||||
|
|
|
@ -40,10 +40,6 @@ interface(`domain_base_type',`
|
||||||
allow $1 self:process { fork sigchld };
|
allow $1 self:process { fork sigchld };
|
||||||
|
|
||||||
ifdef(`targeted_policy',`
|
ifdef(`targeted_policy',`
|
||||||
tunable_policy(`allow_execmem',`
|
|
||||||
allow $1 self:process execmem;
|
|
||||||
')
|
|
||||||
|
|
||||||
# FIXME:
|
# FIXME:
|
||||||
# hack until role dominance is fixed in
|
# hack until role dominance is fixed in
|
||||||
# the module compiler
|
# the module compiler
|
||||||
|
|
Loading…
Reference in New Issue