diff --git a/refpolicy/policy/modules/kernel/mls.te b/refpolicy/policy/modules/kernel/mls.te index 4cfc76b..9d1ee8a 100644 --- a/refpolicy/policy/modules/kernel/mls.te +++ b/refpolicy/policy/modules/kernel/mls.te @@ -72,7 +72,10 @@ range_transition initrc_t sshd_exec_t s0 - s0:c0.c255; range_transition initrc_t udev_exec_t s0 - s0:c0.c255; range_transition initrc_t xdm_exec_t s0 - s0:c0.c255; range_transition kernel_t udev_exec_t s0 - s0:c0.c255; + +# these might be targeted_policy only range_transition unconfined_t su_exec_t s0 - s0:c0.c255; +range_transition unconfined_t initrc_t s0; ') ifdef(`enable_mls',`