a7edcc9f2b
In domain_transition_pattern there is rule: allow $1 $2:file { getattr open read execute }; map permission is missing here, which is generating lot of AVC. Replacing permissions with mmap_exec_file_perms set. |
||
---|---|---|
.. | ||
file_patterns.spt | ||
ipc_patterns.spt | ||
loadable_module.spt | ||
misc_macros.spt | ||
misc_patterns.spt | ||
mls_mcs_macros.spt | ||
obj_perm_sets.spt |