rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add execstack and execheap to unconfined domain exclusion

Browse Source
This commit is contained in:
Chris PeBenito 2006-01-19 15:55:56 +00:00
parent a49e2bd36e
commit edb77e59fe
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
refpolicy/policy/modules/kernel/domain.if
View File

@ -1122,7 +1122,7 @@ interface(`domain_unconfined',`
allow $1 domain:fifo_file rw_file_perms; allow $1 domain:fifo_file rw_file_perms;
# Act upon any other process. # Act upon any other process.
allow $1 domain:process ~{ transition dyntransition execmem }; allow $1 domain:process ~{ transition dyntransition execmem execstack execheap };
# Create/access any System V IPC objects. # Create/access any System V IPC objects.
allow $1 domain:{ sem msgq shm } *; allow $1 domain:{ sem msgq shm } *;