From f57b7ee73e38d7a111e8fda229bf2c889f47af85 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Tue, 25 Oct 2011 15:49:55 -0400 Subject: [PATCH] Move chrome_sandbox_nacl_t to permissive domains --- policy/modules/admin/permissivedomains.te | 10 ++++++++++ policy/modules/apps/chrome.te | 2 -- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/policy/modules/admin/permissivedomains.te b/policy/modules/admin/permissivedomains.te index 23bef3c0..c66d1904 100644 --- a/policy/modules/admin/permissivedomains.te +++ b/policy/modules/admin/permissivedomains.te @@ -331,3 +331,13 @@ optional_policy(` permissive mongod_t; permissive thin_t; ') + +optional_policy(` + gen_require(` + type chrome_sandbox_nacl_t; + ') + + permissive chrome_sandbox_nacl_t; +') + + diff --git a/policy/modules/apps/chrome.te b/policy/modules/apps/chrome.te index 037c73ae..26aba309 100644 --- a/policy/modules/apps/chrome.te +++ b/policy/modules/apps/chrome.te @@ -22,8 +22,6 @@ type chrome_sandbox_nacl_exec_t; application_domain(chrome_sandbox_nacl_t, chrome_sandbox_nacl_exec_t) role system_r types chrome_sandbox_nacl_t; -permissive chrome_sandbox_nacl_t; - ######################################## # # chrome_sandbox local policy -- 2.47.3