selinux-refpolicy/refpolicy/policy/modules/system/domain.te
Chris PeBenito a154cd45f3 reorder
2005-06-09 21:07:58 +00:00

19 lines
467 B
Plaintext

policy_module(domain,1.0)
# Mark process types as domains
attribute domain;
# entrypoint executables
attribute entry_type;
# widely-inheritable file descriptors
attribute privfd;
neverallow domain ~domain:process { transition dyntransition };
# enabling setcurrent breaks process tranquility. If you do not
# know what this means or do not understand the implications of a
# dynamic transition, you should not be using it!!!
neverallow * *:process setcurrent;