34 lines
683 B
Plaintext
34 lines
683 B
Plaintext
|
#
|
||
|
|
# This file contains the policy capabilites
|
||
|
|
# that are enabled in this policy, not a
|
||
|
|
# declaration of DAC capabilites such as
|
||
|
|
# CAP_DAC_OVERRIDE.
|
||
|
|
#
|
||
|
|
# The affected object classes and their
|
||
|
|
# permissions should also be listed in
|
||
|
|
# the comments for each capability.
|
||
|
|
#
|
||
|
|
|
||
|
|
# Enable additional networking access control for
|
||
|
|
# labeled networking peers.
|
||
|
|
#
|
||
|
|
# Checks enabled:
|
||
|
|
# node: sendto recvfrom
|
||
|
|
# netif: ingress egress
|
||
|
|
# peer: recv
|
||
|
|
#
|
||
|
|
#policycap network_peer_controls;
|
||
|
|
|
||
|
|
# Enable additional access controls for opening
|
||
|
|
# a file (and similar objects).
|
||
|
|
#
|
||
|
|
# Checks enabled:
|
||
|
|
# dir: open
|
||
|
|
# file: open
|
||
|
|
# lnk_file: open
|
||
|
|
# fifo_file: open
|
||
|
|
# chr_file: open
|
||
|
|
# blk_file: open
|
||
|
|
#
|
||
|
|
#policycap open_perms;
|