This process is not allowed to interact with subjects or operate on objects that it would otherwise be able to interact with or operate on respectively. This is, i think, to make sure that specified processes cannot interact with subject or operate on objects regardless of its mcs range. It is used by svirt and probably also by sandbox Signed-off-by: Dominick Grift <dominick.grift@gmail.com> |
||
---|---|---|
.. | ||
admin | ||
apps | ||
contrib@a9f692104e | ||
kernel | ||
roles | ||
services | ||
system |