From 60caa302c253fb7d322f696301b76d0a229e22c6 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Mon, 12 Dec 2005 16:52:46 +0000 Subject: [PATCH] fix ptracing of all domains --- refpolicy/policy/modules/kernel/domain.if | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/refpolicy/policy/modules/kernel/domain.if b/refpolicy/policy/modules/kernel/domain.if index 78f2d876a..58d3c7dec 100644 --- a/refpolicy/policy/modules/kernel/domain.if +++ b/refpolicy/policy/modules/kernel/domain.if @@ -85,10 +85,6 @@ interface(`domain_type',` unconfined_sigchld($1) ') - tunable_policy(`allow_ptrace',` - userdom_sigchld_sysadm($1) - ') - # allow any domain to connect to the LDAP server optional_policy(`ldap',` ldap_use($1) @@ -615,6 +611,7 @@ interface(`domain_ptrace_all_domains',` ') allow $1 domain:process ptrace; + allow domain $1:process sigchld; ') ########################################