Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Nov 2003 12:06:30 -0800 (PST)
From:      Andrew Reisse <areisse@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 43041 for review
Message-ID:  <200311252006.hAPK6U0c024924@repoman.freebsd.org>

index | next in thread | raw e-mail

http://perforce.freebsd.org/chv.cgi?CH=43041

Change 43041 by areisse@areisse_ibook on 2003/11/25 12:05:55

	allow running executables

Affected files ...

.. //depot/projects/trustedbsd/sedarwin/policy/rules#3 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin/policy/rules#3 (text+ko) ====

@@ -64,6 +64,7 @@
 type_change user_d devpts_t:chr_file user_devpts_t;
 
 allow domain file:{file lnk_file sock_file} {create_file_perms execute };
+allow domain file:file execute_no_trans;
 allow domain file:dir { create_dir_perms };
 allow domain {null_device_t console_device_t memory_device_t random_device_t device_t}:{file chr_file} create_file_perms;
 allow domain device_t:blk_file create_file_perms;


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311252006.hAPK6U0c024924>