commit 19eecd2dd7bd0f542e8ac7ed6ea576dc397f6639
author dcashman <dcashman@google.com> Mon Mar 02 19:43:01 2015 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Mar 02 19:43:02 2015 +0000
tree 8ebd98151e1dacca2e122302a7becc4fc673b0ff
parent e8df21b20dfc70be413d788586c5f43961c23197
parent 6a2451b580487a07a7e9919efa3ea5289f3ed696

Merge "Allow platform_app access to keystore."

mls

diff --git a/mls b/mls
index d5942c3..06a9d09 100644
--- a/mls
+++ b/mls
@@ -64,7 +64,7 @@
 mlsconstrain dir { read getattr search }
 	     (l1 dom l2 or t1 == mlstrustedsubject or t2 == mlstrustedobject);
 
-mlsconstrain { file lnk_file sock_file chr_file blk_file } { read getattr execute }
+mlsconstrain { file lnk_file sock_file chr_file blk_file } { open execute }
 	     (l1 dom l2 or t1 == mlstrustedsubject or t2 == mlstrustedobject);
 
 # Write operations: Subject must be dominated by the object unless the