rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

move assert.te here

Browse Source
This commit is contained in:
Chris PeBenito 2005-04-18 20:17:25 +00:00
parent 5d78128fda
commit 57d236548b
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
refpolicy/policy/modules/kernel/kernel.te
View File

@ -55,6 +55,14 @@ neverallow ~can_load_policy security_t:security load_policy;
neverallow ~can_setenforce security_t:security setenforce;
neverallow ~can_setsecparam security_t:security setsecparam;
# enabling dyntransition breaks process tranquility. If you dont
# know what this means or dont understand the implications of a
# dynamic transition, you shouldnt be using it!!!
neverallow * *:process { setcurrent dyntransition };
attribute can_load_kernmodule;
neverallow ~can_load_kernmodule *:capability sys_module;
########################################
#
# sysfs_t is the type for /sys