Add a boolean to turn off all instances of ptrace in the policy

[people/stevee/selinux-policy.git] / policy / modules / apps / nsplugin.if

diff --git a/policy/modules/apps/nsplugin.if b/policy/modules/apps/nsplugin.if
index 1925bd99aea2c3602dc891e32ea32c2330c512b6..fce899ab8b08a366891abb4fff259d2fa0869e83 100644 (file)
--- a/policy/modules/apps/nsplugin.if
+++ b/policy/modules/apps/nsplugin.if
@@ -93,7 +93,7 @@ ifdef(`hide_broken_symptoms', `
        dontaudit nsplugin_t $2:shm destroy;
        allow $2 nsplugin_t:sem rw_sem_perms;
 
-       allow $2 nsplugin_t:process { getattr ptrace signal_perms };
+       allow $2 nsplugin_t:process { getattr signal_perms };
        allow $2 nsplugin_t:unix_stream_socket connectto;
 
        # Connect to pulseaudit server