From 6bb672e6b3df2fb3dbb49f32e5f30589ff539e6e Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Tue, 26 Nov 2013 14:43:54 -0500
Subject: [PATCH] Make the system_server domain enforcing.

Change-Id: I1ea20044bd6789dde002da7fc9613cfbf1ee2d23
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 system_server.te | 1 -
 1 file changed, 1 deletion(-)

diff --git a/system_server.te b/system_server.te
index 96edd06e1..29760b14a 100644
--- a/system_server.te
+++ b/system_server.te
@@ -3,7 +3,6 @@
 # Most of the framework services run in this process.
 #
 type system_server, domain, mlstrustedsubject;
-permissive_or_unconfined(system_server)
 
 # Define a type for tmpfs-backed ashmem regions.
 tmpfs_domain(system_server)
-- 
GitLab