Remove allow_execmem from targeted policy domain_base_type().

2006-02-17 16:08:14 +00:00 · 2006-02-17 16:08:14 +00:00 · 3eea5516f5
commit 3eea5516f5
parent a395250983
2 changed files with 1 additions and 4 deletions
--- a/refpolicy/Changelog
+++ b/refpolicy/Changelog
@ -1,3 +1,4 @@
+- Remove allow_execmem from targeted policy domain_base_type().
 - Add users_extra and seusers support.
 - Postfix fixes from Serge Hallyn.
 - Run python and shell directly to interpret scripts so policy
--- a/refpolicy/policy/modules/kernel/domain.if
+++ b/refpolicy/policy/modules/kernel/domain.if
@ -40,10 +40,6 @@ interface(`domain_base_type',`
 	allow $1 self:process { fork sigchld };

 	ifdef(`targeted_policy',`
-		tunable_policy(`allow_execmem',`
-			allow $1 self:process execmem;
-		')
-
 		# FIXME:
 		# hack until role dominance is fixed in
 		# the module compiler