Merge pull request #323 from dsugar100/master
This commit is contained in:
commit
97eda18388
|
@ -512,6 +512,7 @@ if( ! secure_mode_insmod ) {
|
||||||
# gt: there seems to be no trace of the above, at
|
# gt: there seems to be no trace of the above, at
|
||||||
# least in kernel versions greater than 2.6.37...
|
# least in kernel versions greater than 2.6.37...
|
||||||
allow can_load_kernmodule self:capability sys_nice;
|
allow can_load_kernmodule self:capability sys_nice;
|
||||||
|
kernel_search_key(can_load_kernmodule)
|
||||||
kernel_setsched(can_load_kernmodule)
|
kernel_setsched(can_load_kernmodule)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -60,7 +60,6 @@ kernel_write_proc_files(kmod_t)
|
||||||
kernel_mount_debugfs(kmod_t)
|
kernel_mount_debugfs(kmod_t)
|
||||||
kernel_mount_kvmfs(kmod_t)
|
kernel_mount_kvmfs(kmod_t)
|
||||||
kernel_read_debugfs(kmod_t)
|
kernel_read_debugfs(kmod_t)
|
||||||
kernel_search_key(kmod_t)
|
|
||||||
# Rules for /proc/sys/kernel/tainted
|
# Rules for /proc/sys/kernel/tainted
|
||||||
kernel_read_kernel_sysctls(kmod_t)
|
kernel_read_kernel_sysctls(kmod_t)
|
||||||
kernel_rw_kernel_sysctl(kmod_t)
|
kernel_rw_kernel_sysctl(kmod_t)
|
||||||
|
|
Loading…
Reference in New Issue