commit | e4682a63ab87f79130b4f914b79be0867e0d669d | [log] [tgz] |
---|---|---|
author | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jun 27 08:53:39 2012 -0400 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jun 27 08:54:53 2012 -0400 |
tree | 880a952738d4b33469618f75f9c6e16c70e64be5 | |
parent | 6c39ee00e19dbea82782bf1a83cc28d0293f3ba0 [diff] [blame] |
Allow apps to write to /proc/net/xt_qtaguid/ctrl.
diff --git a/ocontexts b/ocontexts index ddd57b6..7cbb989 100644 --- a/ocontexts +++ b/ocontexts
@@ -51,6 +51,7 @@ genfscon rootfs / u:object_r:rootfs:s0 # proc labeling can be further refined (longest matching prefix). genfscon proc / u:object_r:proc:s0 +genfscon proc /net/xt_qtaguid/ctrl u:object_r:qtaguid:s0 # selinuxfs booleans can be individually labeled. genfscon selinuxfs / u:object_r:selinuxfs:s0 genfscon cgroup / u:object_r:cgroup:s0