dwalsh pushed to selinux-policy (master). "We need to setcheckreqprot to 0 for security purposes"

[notifications at fedoraproject.org]

>From 662016aa11f65eb729375bc871aa870ab5360713 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh at redhat.com>
Date: Thu, 16 Apr 2015 14:00:38 -0400
Subject: We need to setcheckreqprot to 0 for security purposes


diff --git a/permissivedomains.pp b/permissivedomains.pp
index 52c87f9..3487ac5 100644
Binary files a/permissivedomains.pp and b/permissivedomains.pp differ
diff --git a/selinux-policy.conf b/selinux-policy.conf
index 1d0292c..f2f1ced 100644
--- a/selinux-policy.conf
+++ b/selinux-policy.conf
@@ -1,4 +1,4 @@
 z /sys/devices/system/cpu/online - - -
 Z /sys/class/net - - -
 z /sys/kernel/uevent_helper - - -
-w /sys/fs/selinux/checkreqprot - - - - 1
+w /sys/fs/selinux/checkreqprot - - - - 0
-- 
cgit v0.10.2


	http://pkgs.fedoraproject.org/cgit/selinux-policy.git/commit/?h=master&id=662016aa11f65eb729375bc871aa870ab5360713