mirror of
https://github.com/SELinuxProject/selinux
synced 2025-02-05 20:32:58 +00:00
11 lines
209 B
Plaintext
11 lines
209 B
Plaintext
|
# handle_unknown deny
|
||
|
|
class CLASS1
|
||
|
|
sid kernel
|
||
|
|
class CLASS1 { PERM1 }
|
||
|
|
type TYPE1;
|
||
|
|
allow TYPE1 self:CLASS1 { PERM1 };
|
||
|
|
role ROLE1;
|
||
|
|
role ROLE1 types { TYPE1 };
|
||
|
|
user USER1 roles ROLE1;
|
||
|
|
sid kernel USER1:ROLE1:TYPE1
|