fix process object class assertion for hierarchy

2006-02-10 14:21:16 +00:00 · 2006-02-10 14:21:16 +00:00 · e0dfbdf15f
parent 4ef7567839
commit e0dfbdf15f
1 changed files with 1 additions and 3 deletions
--- a/refpolicy/policy/modules/kernel/domain.te
+++ b/refpolicy/policy/modules/kernel/domain.te
@ -63,7 +63,5 @@ attribute cron_job_domain;
 # SELinux identity and role change constraints
 attribute process_uncond_exempt;	# add userhelperdomain to this one

-# TODO:
-# cjp: also need to except correctly for SEFramework
-neverallow { domain unlabeled_t } file_type:process *;
+neverallow { domain unlabeled_t } ~{ domain unlabeled_t }:process *;
 neverallow ~{ domain unlabeled_t } *:process *;