| Nick Kralevich | caf42d6 | 2018-10-04 10:57:29 -0700 | [diff] [blame^] | 1 | type system_server_startup, domain, coredomain; |
| 2 | |
| 3 | tmpfs_domain(system_server_startup) |
| 4 | |
| 5 | # Create JIT memory |
| 6 | allow system_server_startup self:process execmem; |
| 7 | allow system_server_startup system_server_startup_tmpfs:file { execute read write open map }; |
| 8 | |
| 9 | # Allow system_server_startup to run setcon() and enter the |
| 10 | # system_server domain |
| 11 | allow system_server_startup self:process setcurrent; |
| 12 | allow system_server_startup system_server:process dyntransition; |