RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enable cgroup_seclabel and nnp_nosuid_transition.

This commit is contained in:
Chris PeBenito 2018-01-16 18:52:39 -05:00
parent c20931323a
commit 88e821f369
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
policy/policy_capabilities
View File

@ -89,12 +89,12 @@ policycap extended_socket_class;
#
# Added checks:
# (none)
#policycap cgroup_seclabel;
policycap cgroup_seclabel;
# Enable NoNewPrivileges support. Requires libsepol 2.7+
# and kernel 4.14 (estimated).
# and kernel 4.14.
#
# Checks enabled;
# process2: nnp_transition, nosuid_transition
#
#policycap nnp_nosuid_transition;
policycap nnp_nosuid_transition;