Skip to content
Snippets Groups Projects
Commit 2d9e22f9 authored by dcashman's avatar dcashman Committed by Gerrit Code Review
Browse files

Merge "Remove duplicate neverallow rule."

parents cba45592 71db4110
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 0 additions and 4 deletions
app.te
+ 0
− 4
View file @ 2d9e22f9
...@@ -241,10 +241,6 @@ neverallow { appdomain -unconfineddomain } { domain -appdomain }:process ...@@ -241,10 +241,6 @@ neverallow { appdomain -unconfineddomain } { domain -appdomain }:process
neverallow { appdomain -shell -unconfineddomain } ~appdomain:process neverallow { appdomain -shell -unconfineddomain } ~appdomain:process
{ transition dyntransition }; { transition dyntransition };
# Map low memory.
# Note: Take to domain.te and apply to all domains in the future.
neverallow { appdomain -unconfineddomain } self:memprotect mmap_zero;
# Write to rootfs. # Write to rootfs.
neverallow { appdomain -unconfineddomain } rootfs:dir_file_class_set neverallow { appdomain -unconfineddomain } rootfs:dir_file_class_set
{ create write setattr relabelfrom relabelto append unlink link rename }; { create write setattr relabelfrom relabelto append unlink link rename };
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment