diff --git a/seapp_contexts b/seapp_contexts index 088937bf6ce5b5266e3704cb5caaa50d4de7be58..71eca75b81ca89d4e63fa2607ece7b7cd591a95a 100644 --- a/seapp_contexts +++ b/seapp_contexts @@ -3,11 +3,11 @@ # user (string) # seinfo (string) # name (string) +# sebool (string) # isSystemServer=true can only be used once. -# An unspecified boolean defaults to false. +# An unspecified isSystemServer defaults to false. # An unspecified string selector will match any value. # A user string selector that ends in * will perform a prefix match. -# seinfo= is only used when looking up app process security contexts. # All specified input selectors in an entry must match (i.e. logical AND). # Matching is case-insensitive. # Precedence rules: @@ -17,6 +17,7 @@ # (4) Longer user= prefix before shorter user= prefix. # (5) Specified seinfo= string before unspecified seinfo= string. # (6) Specified name= string before unspecified name= string. +# (7) Specified sebool= string before unspecified sebool= string. # # Outputs: # domain (string)