Oreon-Lime-R2/selinux-policy/selinux-policy-d9f4a2b/selinux-policy-d9f4a2bbeb91fd95d0c35a90936efb9ea99d2455/policy/modules/roles/unconfineduser.fc

8 lines
482 B
Text

# Add programs here which should not be confined by SELinux
# e.g.:
# /usr/local/bin/appsrv -- gen_context(system_u:object_r:unconfined_exec_t,s0)
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
#/usr/bin/vncserver -- gen_context(system_u:object_r:unconfined_exec_t,s0)
#/usr/sbin/xrdp -- gen_context(system_u:object_r:unconfined_exec_t,s0)
#/usr/sbin/xrdp-sesman -- gen_context(system_u:object_r:unconfined_exec_t,s0)