Shouldn't boinc_t be in the boinc_domain, also does boinc need to kill processes...

diff --git a/policy/modules/services/boinc.te b/policy/modules/services/boinc.te
index 61b22fc9d084a0af50430141a2581a9a2ac54349..040aa2e21543d2a524176ca3a3fb5383927757dc 100644 (file)
--- a/policy/modules/services/boinc.te
+++ b/policy/modules/services/boinc.te
@@ -7,7 +7,7 @@ policy_module(boinc, 1.0.0)
 
 attribute boinc_domain;
 
-type boinc_t;
+type boinc_t, boinc_domain;
 type boinc_exec_t;
 init_daemon_domain(boinc_t, boinc_exec_t)
 
@@ -70,7 +70,6 @@ optional_policy(`
 # boinc local policy
 #
 
-allow boinc_t self:capability { kill };
 allow boinc_t self:process { setsched sigkill };
 
 allow boinc_t self:unix_stream_socket create_stream_socket_perms;