Skip to content
Snippets Groups Projects
Normal view Permalink
init_shell.te 204 B
Newer Older
  • Learn to ignore specific revisions
    • Alex Klyubin's avatar
    SELinux policy that separates "init_shell" from "shell".
    Alex Klyubin committed
    1 
    # Restricted domain for shell processes spawned by init
    Stephen Smalley's avatar
    Confine shell domain in -user builds only.  
    Stephen Smalley committed
    2 
    type init_shell, domain, shelldomain;
    Alex Klyubin's avatar
    SELinux policy that separates "init_shell" from "shell".
    Alex Klyubin committed
    3 
    domain_auto_trans(init, shell_exec, init_shell)
    repo sync's avatar
    Make all domains unconfined.  
    repo sync committed
    4 
    unconfined_domain(init_shell)
    Stephen Smalley's avatar
    Confine shell domain in -user builds only.  
    Stephen Smalley committed
    5 6 
    
# inherits from shelldomain.te