Commits

Anonymous committed 5b8abdf Merge

Merge "Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls."

  • Participants
  • Parent commits 268cc54, 5e1461d

Comments (0)

Files changed (1)

     # Set init and its forked children's oom_adj.
     write /proc/1/oom_adj -16
 
+    # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
+    write /sys/fs/selinux/checkreqprot 0
+
     # Set the security context for the init process.
     # This should occur before anything else (e.g. ueventd) is started.
     setcon u:r:init:s0