[people/stevee/selinux-policy.git] / refpolicy / policy / modules / system / domain.te

# Copyright (C) 2005 Tresys Technology, LLC

# Mark process types as domains
attribute domain;

# processes started by init itself
attribute init_domain;
attribute init_domain_entry;

# processes started by init scripts
attribute daemon_domain;
attribute daemon_domain_entry;

# widely-inheritable file descriptors
attribute privfd;

neverallow domain ~domain:process { transition dyntransition };
Commit	Line	Data
e181fe05 CP	1	# Copyright (C) 2005 Tresys Technology, LLC
e181fe05 CP	2
b4cd1533 CP	3	# Mark process types as domains
	4	attribute domain;
	5
219bcf7a CP	6	# processes started by init itself
	7	attribute init_domain;
	8	attribute init_domain_entry;
	9
	10	# processes started by init scripts
	11	attribute daemon_domain;
	12	attribute daemon_domain_entry;
	13
8a0da108 CP	14	# widely-inheritable file descriptors
	15	attribute privfd;
	16
b4cd1533	17	neverallow domain ~domain:process { transition dyntransition };