diff --git a/isolated_app.te b/isolated_app.te index 0629ab3cf141641bda409c76540710dba280b377..f17372aecb195f5042ebfa8a0d68695bfd4e950d 100644 --- a/isolated_app.te +++ b/isolated_app.te @@ -11,7 +11,6 @@ type isolated_app, domain; app_domain(isolated_app) -net_domain(isolated_app) # Isolated apps shouldn't be able to access the driver directly. neverallow isolated_app gpu_device:file { rw_file_perms execute };