Commit 34d8165e authored by Joshua Brindle's avatar Joshua Brindle

add permissive domain to README

parent 1759add2
Injects allow rules into binary SELinux kernel policies Injects allow rules into binary SELinux kernel policies
Injecting a rule:
$ ./sepolicy-inject -s shell -t system -c file -p read -P sepolicy -o sepolicy2 $ ./sepolicy-inject -s shell -t system -c file -p read -P sepolicy -o sepolicy2
libsepol.policydb_index_others: security: 1 users, 2 roles, 518 types, 14 bools libsepol.policydb_index_others: security: 1 users, 2 roles, 518 types, 14 bools
libsepol.policydb_index_others: security: 1 sens, 1024 cats libsepol.policydb_index_others: security: 1 sens, 1024 cats
...@@ -14,11 +15,19 @@ Found 2 semantic av rules: ...@@ -14,11 +15,19 @@ Found 2 semantic av rules:
allow shell system : file read ; allow shell system : file read ;
allow appdomain domain : file { ioctl read getattr lock open } ; allow appdomain domain : file { ioctl read getattr lock open } ;
Injecting a permissive domain:
$ ./sepolicy-inject -Z shell -P sepolicy -o sepolicy2
$ seinfo sepolicy | grep Permissive
Permissives: 0 Polcap: 2
$ seinfo sepolicy2 | grep Permissive
Permissives: 1 Polcap: 2
TODO: TODO:
Insert multiple rules at the same time Insert multiple rules at the same time
Remove rules Remove rules
Use attributes Use attributes
Add permissive domains
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment