diff --git a/refpolicy/policy/modules/kernel/domain.if b/refpolicy/policy/modules/kernel/domain.if index db68ba88..15fcea55 100644 --- a/refpolicy/policy/modules/kernel/domain.if +++ b/refpolicy/policy/modules/kernel/domain.if @@ -1122,7 +1122,7 @@ interface(`domain_unconfined',` allow $1 domain:fifo_file rw_file_perms; # Act upon any other process. - allow $1 domain:process ~{ transition dyntransition execmem }; + allow $1 domain:process ~{ transition dyntransition execmem execstack execheap }; # Create/access any System V IPC objects. allow $1 domain:{ sem msgq shm } *;