selinux-policy/default_trans.patch
Dan Walsh 4dba2eb895 Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
Allow init process to setrlimit on itself
Take away transition rules for users executing ssh-keygen
Allow setroubleshoot_fixit_t to read /dev/urand
Allow sshd to relbale tunnel sockets
Allow fail2ban domtrans to shorewall in the same way as with iptables
Add support for lnk files in the /var/lib/sssd directory
Allow system mail to connect to courier-authdaemon over an unix stream socket
2011-10-19 08:29:33 -04:00

12 lines
220 B
Diff

diff --git a/policy/mcs b/policy/mcs
index ed7a0c1..90d0b1e 100644
--- a/policy/mcs
+++ b/policy/mcs
@@ -1,4 +1,6 @@
ifdef(`enable_mcs',`
+default_trans level dir_file_class_set parent;
+
#
# Define sensitivities
#