From 662016aa11f65eb729375bc871aa870ab5360713 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Apr 16 2015 18:00:38 +0000 Subject: We need to setcheckreqprot to 0 for security purposes --- diff --git a/permissivedomains.pp b/permissivedomains.pp index 52c87f9..3487ac5 100644 Binary files a/permissivedomains.pp and b/permissivedomains.pp differ diff --git a/selinux-policy.conf b/selinux-policy.conf index 1d0292c..f2f1ced 100644 --- a/selinux-policy.conf +++ b/selinux-policy.conf @@ -1,4 +1,4 @@ z /sys/devices/system/cpu/online - - - Z /sys/class/net - - - z /sys/kernel/uevent_helper - - - -w /sys/fs/selinux/checkreqprot - - - - 1 +w /sys/fs/selinux/checkreqprot - - - - 0