Skip to content
Snippets Groups Projects
Commit e90666b7 authored by dcashman's avatar dcashman Committed by Android Git Automerger
Browse files

am 7bf1b897: am e8df21b2: Merge "Remove read access from mls constraints."

* commit '7bf1b897':
  Remove read access from mls constraints.
parents 3f6430dd 7bf1b897
No related branches found
No related tags found
No related merge requests found
......@@ -64,7 +64,7 @@ mlsconstrain dir_file_class_set { create relabelfrom relabelto }
mlsconstrain dir { read getattr search }
(l1 dom l2 or t1 == mlstrustedsubject or t2 == mlstrustedobject);
mlsconstrain { file lnk_file sock_file chr_file blk_file } { read getattr execute }
mlsconstrain { file lnk_file sock_file chr_file blk_file } { open execute }
(l1 dom l2 or t1 == mlstrustedsubject or t2 == mlstrustedobject);
# Write operations: Subject must be dominated by the object unless the
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment