| commit | 8b51674b2d2588c97ee6ddb976d6458ad33e2880 | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jan 08 09:29:30 2014 -0500 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jan 08 09:33:26 2014 -0500 |
| tree | a123d84e9bab53f103fe878484a68d0d2e11878d | |
| parent | fa4002fc7f9d9edabc4f9aee284793eb2226f234 [diff] |
Restrict ability to set checkreqprot. Now that we set /sys/fs/selinux/checkreqprot via init.rc, restrict the ability to set it to only the kernel domain. Change-Id: I975061fd0e69c158db9bdb23e6ba77948e3fead1 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>