[selinux-policy/f16] Need to turn on chrome_sandbox_t transition in order to dontaudit access to mmap_zero

Daniel J Walsh dwalsh at fedoraproject.org
Tue Oct 11 18:06:22 UTC 2011


commit a9e66a810dc9de4477d585b1a63029ad701ee2fa
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Tue Oct 11 14:06:16 2011 -0400

    Need to turn on chrome_sandbox_t transition in order to dontaudit access to mmap_zero

 booleans-targeted.conf |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/booleans-targeted.conf b/booleans-targeted.conf
index 914f25b..34f7eb3 100644
--- a/booleans-targeted.conf
+++ b/booleans-targeted.conf
@@ -263,6 +263,10 @@ unconfined_mozilla_plugin_transition=false
 # 
 unconfined_telepathy_transition=false
 
+# Allow unconfined domain to transition to chrome_sandbox confined domain
+# 
+unconfined_chrome_sandbox_transition=true
+
 # Allow telepathy domains to connect to all network ports
 # 
 telepathy_tcp_connect_generic_network_ports=true


More information about the scm-commits mailing list