Skip to content
Snippets Groups Projects
Commit e8a292ce authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "init.te: fixup stale comment"

parents 4134a4c1 92ade748
Branches
No related tags found
No related merge requests found
...@@ -347,8 +347,8 @@ allow init system_data_file:lnk_file r_file_perms; ...@@ -347,8 +347,8 @@ allow init system_data_file:lnk_file r_file_perms;
### neverallow rules ### neverallow rules
### ###
# The init domain is only entered via setcon from the kernel domain, # The init domain is only entered via an exec based transition from the
# never via an exec-based transition. # kernel domain, never via setcon().
neverallow domain init:process dyntransition; neverallow domain init:process dyntransition;
neverallow { domain -kernel } init:process transition; neverallow { domain -kernel } init:process transition;
neverallow init { file_type fs_type -init_exec }:file entrypoint; neverallow init { file_type fs_type -init_exec }:file entrypoint;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment