Enable cgroup_seclabel and nnp_nosuid_transition.
This commit is contained in:
parent
c20931323a
commit
88e821f369
|
@ -89,12 +89,12 @@ policycap extended_socket_class;
|
||||||
#
|
#
|
||||||
# Added checks:
|
# Added checks:
|
||||||
# (none)
|
# (none)
|
||||||
#policycap cgroup_seclabel;
|
policycap cgroup_seclabel;
|
||||||
|
|
||||||
# Enable NoNewPrivileges support. Requires libsepol 2.7+
|
# Enable NoNewPrivileges support. Requires libsepol 2.7+
|
||||||
# and kernel 4.14 (estimated).
|
# and kernel 4.14.
|
||||||
#
|
#
|
||||||
# Checks enabled;
|
# Checks enabled;
|
||||||
# process2: nnp_transition, nosuid_transition
|
# process2: nnp_transition, nosuid_transition
|
||||||
#
|
#
|
||||||
#policycap nnp_nosuid_transition;
|
policycap nnp_nosuid_transition;
|
||||||
|
|
Loading…
Reference in New Issue