From 27daf189ef460f95841f55c3e8e9035c06f984b9 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Wed, 11 Dec 2013 08:44:05 -0500
Subject: [PATCH] Make the runas domain enforcing.

Change-Id: I4b3dda1d08e8bfc523493f4b8d79a4cc3e7e7787
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 runas.te | 1 -
 1 file changed, 1 deletion(-)

diff --git a/runas.te b/runas.te
index c789b1411..8648ee711 100644
--- a/runas.te
+++ b/runas.te
@@ -1,5 +1,4 @@
 type runas, domain, mlstrustedsubject;
-permissive runas;
 type runas_exec, exec_type, file_type;
 
 # ndk-gdb invokes adb shell run-as.
-- 
GitLab