From 8ab4c6e0db1dd758830023e91cfcfc989af27ec7 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Tue, 22 Aug 2023 13:50:56 +0200 Subject: Enables ioctl_skip_cloexec Signed-off-by: Dominick Grift --- src/misc/conf.cil | 4 +--- src/misc/xperm.cil | 8 -------- 2 files changed, 1 insertion(+), 11 deletions(-) delete mode 100644 src/misc/xperm.cil (limited to 'src/misc') diff --git a/src/misc/conf.cil b/src/misc/conf.cil index f7c70d4..3f77a6b 100644 --- a/src/misc/conf.cil +++ b/src/misc/conf.cil @@ -11,6 +11,4 @@ (policycap "network_peer_controls") (policycap "nnp_nosuid_transition") (policycap "open_perms") - -;; SELinux 3.4/Linux 5.18 -;; (policycap "ioctl_skip_cloexec") +(policycap "ioctl_skip_cloexec") diff --git a/src/misc/xperm.cil b/src/misc/xperm.cil deleted file mode 100644 index 4aca460..0000000 --- a/src/misc/xperm.cil +++ /dev/null @@ -1,8 +0,0 @@ -;; SPDX-FileCopyrightText: © 2023 Dominick Grift -;; SPDX-License-Identifier: Unlicense - -(permissionx FIOCLEX_FIONCLEX_CHRFILE - (ioctl chr_file (0x6601 0x5451 0x6602 0x5450))) - -(permissionx FIOCLEX (ioctl chr_file (0x6601 0x5451))) -(permissionx FIONCLEX (ioctl chr_file (0x6602 0x5450))) -- cgit v1.2.3