Blame refpolicy/policy/modules/system/domain.te
|
Chris PeBenito |
e181fe |
|
|
Chris PeBenito |
960373 |
policy_module(domain,1.0)
|
|
Chris PeBenito |
960373 |
|
|
Chris PeBenito |
b4cd15 |
# Mark process types as domains
|
|
Chris PeBenito |
b4cd15 |
attribute domain;
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
960373 |
# entrypoint executables
|
|
Chris PeBenito |
960373 |
attribute entry_type;
|
|
Chris PeBenito |
960373 |
|
|
Chris PeBenito |
8a0da1 |
# widely-inheritable file descriptors
|
|
Chris PeBenito |
8a0da1 |
attribute privfd;
|
|
Chris PeBenito |
8a0da1 |
|
|
Chris PeBenito |
b4cd15 |
neverallow domain ~domain:process { transition dyntransition };
|