diff --git a/app.te b/app.te index ecdea85eaa0d7bcba611255cf1073daac764cd0e..361530624a34f7e33b2811a0bd3428fd40b262b2 100644 --- a/app.te +++ b/app.te @@ -241,10 +241,6 @@ neverallow { appdomain -unconfineddomain } { domain -appdomain }:process neverallow { appdomain -shell -unconfineddomain } ~appdomain:process { transition dyntransition }; -# Map low memory. -# Note: Take to domain.te and apply to all domains in the future. -neverallow { appdomain -unconfineddomain } self:memprotect mmap_zero; - # Write to rootfs. neverallow { appdomain -unconfineddomain } rootfs:dir_file_class_set { create write setattr relabelfrom relabelto append unlink link rename };