summaryrefslogtreecommitdiff
path: root/sepolicy
diff options
context:
space:
mode:
authorRobert Craig <rpcraig@tycho.ncsc.mil>2014-01-29 10:40:52 -0500
committerNick Kralevich <nnk@google.com>2014-02-20 22:24:12 +0000
commit1a5c4ac50a9ecbce0a32ca50d89ae886c51d9e7e (patch)
treeac61d16680d9364cc47b1da70cb77e5df630002e /sepolicy
parent74e05469b00677070fee8f5ab61502139c0c644e (diff)
downloadflo-1a5c4ac50a9ecbce0a32ca50d89ae886c51d9e7e.tar.gz
Make conn_init domain enforcing.
Change-Id: I52d22c9551e3608bf920d67c1debf15c505de4d2 Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/conn_init.te1
1 files changed, 0 insertions, 1 deletions
diff --git a/sepolicy/conn_init.te b/sepolicy/conn_init.te
index d83c53e..352609c 100644
--- a/sepolicy/conn_init.te
+++ b/sepolicy/conn_init.te
@@ -3,7 +3,6 @@ type conn_init, domain;
type conn_init_exec, exec_type, file_type;
init_daemon_domain(conn_init)
-permissive_or_unconfined(conn_init)
# Runs init.flo.wifi.sh
allow conn_init shell_exec:file { entrypoint read };