2012-01-04 18:33:27 +01:00
|
|
|
# init switches to init domain (via init.rc).
|
|
|
|
|
type init, domain;
|
2013-05-15 06:02:55 +02:00
|
|
|
permissive init;
|
2012-01-04 18:33:27 +01:00
|
|
|
# init is unconfined.
|
|
|
|
|
unconfined_domain(init)
|
|
|
|
|
tmpfs_domain(init)
|
2013-07-10 23:46:05 +02:00
|
|
|
relabelto_domain(init)
|
2013-05-18 02:11:29 +02:00
|
|
|
# add a rule to handle unlabelled mounts
|
|
|
|
|
allow init unlabeled:filesystem mount;
|
2013-07-10 23:46:05 +02:00
|
|
|
|
|
|
|
|
allow init {fs_type dev_type file_type}:dir_file_class_set relabelto;
|
2013-07-16 02:10:35 +02:00
|
|
|
allow init kernel:security load_policy;
|
