[selinux-policy/f16] Turn off unconfined transitions

Daniel J Walsh dwalsh at fedoraproject.org
Tue Oct 4 15:37:56 UTC 2011


commit c14289e20921fe16817a41ab381a4a7b9979df97
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Tue Oct 4 11:37:35 2011 -0400

    Turn off unconfined transitions

 booleans-targeted.conf |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)
---
diff --git a/booleans-targeted.conf b/booleans-targeted.conf
index 3a32908..914f25b 100644
--- a/booleans-targeted.conf
+++ b/booleans-targeted.conf
@@ -253,15 +253,15 @@ allow_nsplugin_execmem=true
 
 # Allow unconfined domain to transition to confined domain
 # 
-allow_unconfined_nsplugin_transition=true
+allow_unconfined_nsplugin_transition=false
 
 # Allow unconfined domain to transition to confined domain
 # 
-unconfined_mozilla_plugin_transition=true
+unconfined_mozilla_plugin_transition=false
 
 # Allow unconfined domain to transition to confined domain
 # 
-unconfined_telepathy_transition=true
+unconfined_telepathy_transition=false
 
 # Allow telepathy domains to connect to all network ports
 # 


More information about the scm-commits mailing list