diff --git a/strict/domains/misc/kernel.te b/strict/domains/misc/kernel.te index 640309a3..b2df503f 100644 --- a/strict/domains/misc/kernel.te +++ b/strict/domains/misc/kernel.te @@ -11,7 +11,7 @@ # kernel_t is the domain of kernel threads. # It is also the target type when checking permissions in the system class. # -type kernel_t, domain, privmodule, privlog, sysctl_kernel_writer, mlsprocread, mlsprocwrite, privsysmod ifdef(`nfs_export_all_rw',`,etc_writer'), privrangetrans ; +type kernel_t, domain, privmodule, privlog, sysctl_kernel_writer, mlsprocread, mlsprocwrite, privsysmod, etc_writer, privrangetrans ; role system_r types kernel_t; general_domain_access(kernel_t) general_proc_read_access(kernel_t) diff --git a/strict/domains/program/unused/rdisc.te b/strict/domains/program/rdisc.te similarity index 100% rename from strict/domains/program/unused/rdisc.te rename to strict/domains/program/rdisc.te