diff options
| author | Robert Craig <rpcraig@tycho.ncsc.mil> | 2014-02-24 11:35:25 -0800 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2014-02-24 11:35:25 -0800 |
| commit | c17a01dfeeadc3dcf7b9cbd62d5342619843ff32 (patch) | |
| tree | ca8f33fc482f36dd0c939bf65041c87473cbe985 /sepolicy | |
| parent | d96d17b577f7036c29859373719f770d14feea99 (diff) | |
| download | flo-c17a01dfeeadc3dcf7b9cbd62d5342619843ff32.tar.gz | |
Make kickstart domain enforcing.
Change-Id: Ib563b78cb1e14ca791ad8a505c14846ffd074949
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/kickstart.te | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/sepolicy/kickstart.te b/sepolicy/kickstart.te index a20fffa..30bc946 100644 --- a/sepolicy/kickstart.te +++ b/sepolicy/kickstart.te @@ -4,8 +4,6 @@ type kickstart_exec, file_type, exec_type; init_daemon_domain(kickstart) -permissive_or_unconfined(kickstart) - # Run kickstart_checker.sh allow kickstart shell_exec:file { entrypoint read }; allow kickstart kickstart_exec:file { getattr open execute_no_trans }; |