From 5a98304335941e2474fa27e0b516e1b268364570 Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Fri, 21 Feb 2014 16:27:00 -0800 Subject: [PATCH] uncrypt: move into enforcing Move the uncrypt domain into SELinux enforcing mode. This will start enforcing SELinux rules; security policy violations will return EPERM. Bug: 13083922 Change-Id: I4805662d8b336e2bfd891237cc916c57179ebf12 --- uncrypt.te | 1 - 1 file changed, 1 deletion(-) diff --git a/uncrypt.te b/uncrypt.te index 97258a7b3..f62fbbfd1 100644 --- a/uncrypt.te +++ b/uncrypt.te @@ -3,7 +3,6 @@ type uncrypt, domain; type uncrypt_exec, exec_type, file_type; init_daemon_domain(uncrypt) -permissive_or_unconfined(uncrypt) allow uncrypt self:capability dac_override; -- GitLab