| commit | ae1cd1207605fbe57a895151039e3c3d7c98b2b8 | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jul 14 12:11:40 2017 -0400 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jul 28 15:42:36 2017 -0400 |
| tree | f7e815e3c04f522dbce4561459cb6a7a4debb0b1 | |
| parent | f80ea846989ba59caadf76b995542184b8031c8d [diff] |
libsepol: Define nnp_nosuid_transition policy capability Define the nnp_nosuid_transition policy capability used to enable SELinux domain transitions under NNP or nosuid if the nnp_transition permission or nosuid_transition permission is allowed between the old and new contexts. When this capability is not enabled, such transitions remain limited to bounded transitions as they were prior to the introduction of this capability. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>