From a59e765afb37bea328408bc6ceb9787afbfd3ecf Mon Sep 17 00:00:00 2001 From: Isaac Chen Date: Fri, 27 Jul 2018 14:27:16 +0200 Subject: wayne: sepolicy: Initial denials Signed-off-by: Isaac Chen --- sepolicy/system_server.te | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 sepolicy/system_server.te (limited to 'sepolicy/system_server.te') diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te new file mode 100644 index 0000000..c658e69 --- /dev/null +++ b/sepolicy/system_server.te @@ -0,0 +1,2 @@ +#============= system_server ============== +allow system_server vendor_file:file { execute getattr open read }; -- cgit v1.2.3