commit | 08ecc028211f723aef97983ce13c175863028be9 | [log] [tgz] |
---|---|---|
author | Stephen Smalley <sds@tycho.nsa.gov> | Mon Dec 02 08:54:01 2013 -0500 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Mon Dec 02 08:54:31 2013 -0500 |
tree | bbe83aef2456ff3d128f4dc9982986223b275725 | |
parent | 476855357b5ec9f59754cdb5aa0f0a6806b34049 [diff] |
Make the isolated_app domain enforcing. Change-Id: I11be7d1713dd7cb35b8046503a09e42567e53d86 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/isolated_app.te b/isolated_app.te index 3b99e37..07b9b44 100644 --- a/isolated_app.te +++ b/isolated_app.te
@@ -10,7 +10,6 @@ ### type isolated_app, domain; -permissive isolated_app; app_domain(isolated_app) # Already connected, unnamed sockets being passed over some other IPC