selinux-policy/dontaudit.patch

24 lines
824 B
Diff
Raw Normal View History

diff --git a/policy/modules/kernel/domain.te b/policy/modules/kernel/domain.te
index db2a183..02cf550 100644
--- a/policy/modules/kernel/domain.te
+++ b/policy/modules/kernel/domain.te
@@ -312,3 +312,5 @@ optional_policy(`
optional_policy(`
seutil_dontaudit_read_config(domain)
')
+
+dontaudit domain domain:process { noatsecure siginh rlimitinh } ;
diff --git a/policy/support/misc_patterns.spt b/policy/support/misc_patterns.spt
index 823794e..18e1b2f 100644
--- a/policy/support/misc_patterns.spt
+++ b/policy/support/misc_patterns.spt
@@ -4,7 +4,7 @@
define(`domain_transition_pattern',`
allow $1 $2:file { getattr open read execute };
allow $1 $3:process transition;
- dontaudit $1 $3:process { noatsecure siginh rlimitinh };
+# dontaudit $1 $3:process { noatsecure siginh rlimitinh };
')
# compatibility: