diff options
| author | Dominick Grift <dominick.grift@defensec.nl> | 2025-04-27 11:59:30 +0200 |
|---|---|---|
| committer | Dominick Grift <dominick.grift@defensec.nl> | 2025-04-27 11:59:30 +0200 |
| commit | 88a5f505104473b97d6f1f6774de2f9fb8d907c4 (patch) | |
| tree | f9f5a6f1875df46be8a495b665350dff5a6c849a /src/file/runfile/runlockfile.cil | |
| parent | 319fb10e64b4e00fb79ec23e6fca590eaa60c792 (diff) | |
| download | selinux-policy-88a5f505104473b97d6f1f6774de2f9fb8d907c4.tar.gz | |
/run/lock fixes
its world writable like /tmp
default to none-spec inside there like /tmp
Diffstat (limited to 'src/file/runfile/runlockfile.cil')
| -rw-r--r-- | src/file/runfile/runlockfile.cil | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/file/runfile/runlockfile.cil b/src/file/runfile/runlockfile.cil index f790314..41f292c 100644 --- a/src/file/runfile/runlockfile.cil +++ b/src/file/runfile/runlockfile.cil @@ -3,7 +3,9 @@ (block runlock - (blockinherit .file.runlock.template)) + (blockinherit .file.runlock.template) + + (call .rbacsep.exempt.obj.type (file))) (in file |