diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if index d01cffc..d37974c 100644 --- a/policy/modules/system/selinuxutil.if +++ b/policy/modules/system/selinuxutil.if @@ -244,11 +244,21 @@ interface(`seutil_dontaudit_signal_newrole',` ## ## Send a SIGCHLD signal to newrole. ## +## +##

+## Allow the specified domain to send a SIGCHLD +## signal to newrole. This signal is automatically +## sent from a process that is terminating to +## its parent. This may be needed by domains +## that are executed from newrole. +##

+##
## ## ## Domain allowed access. ## ## +## # interface(`seutil_sigchld_newrole',` gen_require(`