| commit | 631a5a8e485ee030f97a6e2d42aefbf18e92c4d8 | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jun 20 13:54:10 2014 -0400 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jun 20 13:54:10 2014 -0400 |
| tree | bdcfe9a2d46b6ad496b005588516056f204f3a0b | |
| parent | 04b8a75c2f7532821a2a098a95d884931a91807c [diff] |
Remove app_data_file access from unconfineddomain. Require app_data_file access to be explicitly allowed to each domain. We especially do not want to allow app_data_file:lnk_file read to any privileged domain. But removing app_data_file access in general can be useful in protecting app data from rogue daemons. Change-Id: I46240562bce76579e108495ab15833e143841ad8 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>