[selinux-policy: 1/2] Turn on checkreqprot flag for tighter SELinux Security

Daniel J Walsh dwalsh at fedoraproject.org
Fri Jan 24 16:20:06 UTC 2014


commit bd53c01332282f86a32da8e812eeb467d6640c02
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Fri Jan 24 11:20:00 2014 -0500

    Turn on checkreqprot flag for tighter SELinux Security

 selinux-policy.conf |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
---
diff --git a/selinux-policy.conf b/selinux-policy.conf
index eb98593..5579d38 100644
--- a/selinux-policy.conf
+++ b/selinux-policy.conf
@@ -1,3 +1,4 @@
 z /sys/devices/system/cpu/online - - -
 Z /sys/class/net - - -
 z /sys/kernel/uevent_helper - - -
+w /sys/fs/selinux/checkreqprot 1


More information about the scm-commits mailing list