Skip to content
  • Lukas Braun's avatar
    slsm: implement confine flag · 7b769e45
    Lukas Braun authored
    A confined process will never change its label and will thus
    never gain new permissions.
    Unlike the inherit flag, the confined process does not inherit
    the permissions of the execing (unconfined) process.
    7b769e45