blob: dda77080bf360c577cbf00a52cf25593e52e85bd [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001type su, domain;
Stephen Smalley01301542013-09-27 10:38:14 -04002type su_exec, exec_type, file_type;
Stephen Smalley2dd4e512012-01-04 12:33:27 -05003domain_auto_trans(shell, su_exec, su)
4
5# su is unconfined.
6unconfined_domain(su)
Stephen Smalleyd99e6d52013-12-02 14:18:11 -05007
8# su is also permissive to permit setenforce.
9permissive su;