diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if index d01cffc..d37974c 100644 --- a/policy/modules/system/selinuxutil.if +++ b/policy/modules/system/selinuxutil.if @@ -244,11 +244,21 @@ interface(`seutil_dontaudit_signal_newrole',` ## <summary> ## Send a SIGCHLD signal to newrole. ## </summary> +## <desc> +## <p> +## Allow the specified domain to send a SIGCHLD +## signal to newrole. This signal is automatically +## sent from a process that is terminating to +## its parent. This may be needed by domains +## that are executed from newrole. +## </p> +## </desc> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> +## <infoflow type="write" weight="1"/> # interface(`seutil_sigchld_newrole',` gen_require(`