Skip to content
Snippets Groups Projects
  • Stephen Smalley's avatar
    Remove execmod access to system_file and exec_type. · a893edae
    Stephen Smalley authored
    
    execmod is checked on attempts to make executable a file mapping
    that has been modified.  Typically this indicates a text relocation
    attempt.  As we do not ever allow this for any confined domain to
    system_file or exec_type, we should not need it for unconfineddomain
    either.
    
    Change-Id: I8fdc858f836ae0d2aa56da2abd7797fba9c258b1
    Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
    a893edae