Commits

Stephen Smalley committed b35ab4d Merge

Merge branch 'master' into seandroid

Comments (0)

Files changed (2)

 
 init_daemon_domain(lmkd)
 
-allow lmkd self:capability { dac_override sys_resource };
+allow lmkd self:capability { dac_override sys_resource kill };
 
 ## Open and write to /proc/PID/oom_score_adj
 ## TODO: maybe scope this down?
 # Raw writes to block device
 allow uncrypt self:capability sys_rawio;
 allow uncrypt block_device:blk_file w_file_perms;
+allow uncrypt block_device:dir r_dir_perms;