* commit '51ad2ad3aa9ad88c958b4c63bbdf4a4452c65087': recovery: start enforcing SELinux rules
This commit is contained in:
commit
0c9a873a78
1 changed files with 0 additions and 1 deletions
|
@ -8,7 +8,6 @@ type recovery, domain;
|
|||
# Otherwise recovery is only allowed the domain rules.
|
||||
recovery_only(`
|
||||
allow recovery rootfs:file { entrypoint execute };
|
||||
permissive_or_unconfined(recovery)
|
||||
|
||||
allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin sys_tty_config };
|
||||
|
||||
|
|
Loading…
Reference in a new issue