diff --git a/refpolicy/policy/modules/system/domain.if b/refpolicy/policy/modules/system/domain.if index f9e1cf4f..fe8bcb6e 100644 --- a/refpolicy/policy/modules/system/domain.if +++ b/refpolicy/policy/modules/system/domain.if @@ -484,14 +484,15 @@ define(`domain_auto_trans',` ') define(`domain_trans_depend',` + class file { getattr read execute }; + process { transition noatsecure siginh rlimitinh }; +') ######################################## # # domain_auto_trans(source_domain,entrypoint_file,target_domain) # define(`domain_auto_trans',` - requires_block_template(`$0'_depend) - domain_trans($1,$2,$3) type_transition $1 $2:process $3; ')