Commits

Stephen Smalley committed 19ce13e

Allow kernel execmem for recovery.

...until we set up its own domain.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

Comments (0)

Files changed (1)

 
 # Set checkreqprot by init.rc prior to switching to init domain.
 allow kernel self:security setcheckreqprot;
+
+# For /sbin/recovery until we set up its own domain.
+allow kernel self:process execmem;