From 5496553038630adaca54bb00a38a64663209fe9a Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Apr 19 2005 13:52:45 +0000 Subject: kernel can load modules --- diff --git a/refpolicy/policy/modules/kernel/kernel.te b/refpolicy/policy/modules/kernel/kernel.te index 9ad2232..201cdc0 100644 --- a/refpolicy/policy/modules/kernel/kernel.te +++ b/refpolicy/policy/modules/kernel/kernel.te @@ -2,7 +2,7 @@ # kernel_t is the domain of kernel threads. # It is also the target type when checking permissions in the system class. # -type kernel_t; +type kernel_t, can_load_kernmodule; role system_r types kernel_t; domain_make_base_domain(kernel_t)