selinux-refpolicy/policy/support
Lukas Vrabec a7edcc9f2b Improve domain_transition_pattern to allow mmap entrypoint bin file.
In domain_transition_pattern there is rule:
allow $1 $2:file { getattr open read execute };

map permission is missing here, which is generating lot of AVC.
Replacing permissions with mmap_exec_file_perms set.
2018-07-19 19:48:08 -04:00
..
file_patterns.spt Add missing mmap_*_files_pattern macros. 2017-12-13 19:01:45 -05:00
ipc_patterns.spt update policy/support macros 2016-12-01 19:38:14 +01:00
loadable_module.spt loadable_module.spt: Add debugging comments for tunable_policy blocks. 2017-11-28 20:22:59 -05:00
misc_macros.spt Add new mmap permission set and pattern support macros. 2017-12-13 18:58:34 -05:00
misc_patterns.spt Improve domain_transition_pattern to allow mmap entrypoint bin file. 2018-07-19 19:48:08 -04:00
mls_mcs_macros.spt - Move range transitions to modules. 2006-10-04 17:25:34 +00:00
obj_perm_sets.spt refpolicy: Update for kernel sctp support 2018-03-21 14:14:37 -04:00