Add a boolean to turn off all instances of ptrace in the policy

[people/stevee/selinux-policy.git] / policy / modules / services / ifplugd.if

diff --git a/policy/modules/services/ifplugd.if b/policy/modules/services/ifplugd.if
index 766542964cdb6e63d9155b75c7920083313d14fc..fa1b91da8015f33c9f8e4d5b1c946177c7b639f3 100644 (file)
--- a/policy/modules/services/ifplugd.if
+++ b/policy/modules/services/ifplugd.if
@@ -117,7 +117,7 @@ interface(`ifplugd_admin',`
                type ifplugd_initrc_exec_t;
        ')
 
-       allow $1 ifplugd_t:process { ptrace signal_perms };
+       allow $1 ifplugd_t:process signal_perms;
        ps_process_pattern($1, ifplugd_t)
 
        init_labeled_script_domtrans($1, ifplugd_initrc_exec_t)