From: domg472@gmail.com (Dominick Grift) Date: Wed, 1 Sep 2010 17:54:36 +0200 Subject: [refpolicy] [mmap zero conditional for unconfined patch ] 1/1] Allow unconfined domains to mmap low conditionally. Message-ID: <20100901155432.GA22316@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Allow unconfined domains to mmap low conditionally. Signed-off-by: Dominick Grift --- :100644 100644 416e668... a1bfac5... M policy/modules/system/unconfined.if policy/modules/system/unconfined.if | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/policy/modules/system/unconfined.if b/policy/modules/system/unconfined.if index 416e668..a1bfac5 100644 --- a/policy/modules/system/unconfined.if +++ b/policy/modules/system/unconfined.if @@ -37,6 +37,7 @@ interface(`unconfined_domain_noaudit',` kernel_unconfined($1) corenet_unconfined($1) dev_unconfined($1) + domain_mmap_low($1) domain_unconfined($1) domain_dontaudit_read_all_domains_state($1) domain_dontaudit_ptrace_all_domains($1) -- 1.7.2.1 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100901/67528464/attachment.bin