Make the system_server domain enforcing.

Change-Id: I1ea20044bd6789dde002da7fc9613cfbf1ee2d23
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
Stephen Smalley 2013-11-26 14:43:54 -05:00 committed by Nick Kralevich
parent 90cb59fd51
commit 6bb672e6b3

View file

@ -3,7 +3,6 @@
# Most of the framework services run in this process.
#
type system_server, domain, mlstrustedsubject;
permissive_or_unconfined(system_server)
# Define a type for tmpfs-backed ashmem regions.
tmpfs_domain(system_server)