Skip to content
Snippets Groups Projects
Commit f853715d authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Remove setting /proc/self/attr/* from unconfined.


Change I6a2fb1279318625a80f3ea8e3f0932bdbe6df676 removed
these permissions from domain.te and added them to specific domains
as required.  Remove the permissions from unconfineddomain as well
so that they are only allowed where explicitly allowed.  The earlier
change already added the necessary permissions to init, kernel,
and recovery so we do not need to add them here.

Change-Id: Ifeb5438532a7525e64328e1c54b436e9b6f7fd3b
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent ccb9f7a1
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment