selinux-policy/refpolicy/policy/modules/system/domain.te
2005-06-01 17:34:13 +00:00

14 lines
248 B
Plaintext

policy_module(domain,1.0)
# Mark process types as domains
attribute domain;
# entrypoint executables
attribute entry_type;
# widely-inheritable file descriptors
attribute privfd;
neverallow domain ~domain:process { transition dyntransition };