nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix process object class assertion for hierarchy

This commit is contained in:
Chris PeBenito 2006-02-10 14:21:16 +00:00
parent 4ef7567839
commit e0dfbdf15f
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
refpolicy/policy/modules/kernel/domain.te
View File

@ -63,7 +63,5 @@ attribute cron_job_domain;
# SELinux identity and role change constraints # SELinux identity and role change constraints
attribute process_uncond_exempt; # add userhelperdomain to this one attribute process_uncond_exempt; # add userhelperdomain to this one
# TODO: neverallow { domain unlabeled_t } ~{ domain unlabeled_t }:process *;
# cjp: also need to except correctly for SEFramework
neverallow { domain unlabeled_t } file_type:process *;
neverallow ~{ domain unlabeled_t } *:process *; neverallow ~{ domain unlabeled_t } *:process *;