Skip to content
Snippets Groups Projects
Commit a893edae authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Remove execmod access to system_file and exec_type.


execmod is checked on attempts to make executable a file mapping
that has been modified.  Typically this indicates a text relocation
attempt.  As we do not ever allow this for any confined domain to
system_file or exec_type, we should not need it for unconfineddomain
either.

Change-Id: I8fdc858f836ae0d2aa56da2abd7797fba9c258b1
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent bb75dd73
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment