PERFORCE change 43041 for review

[Andrew Reisse]

http://perforce.freebsd.org/chv.cgi?CH=43041

Change 43041 by areisse at areisse_ibook on 2003/11/25 12:05:55

	allow running executables

Affected files ...

.. //depot/projects/trustedbsd/sedarwin/policy/rules#3 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin/policy/rules#3 (text+ko) ====

@@ -64,6 +64,7 @@
 type_change user_d devpts_t:chr_file user_devpts_t;
 
 allow domain file:{file lnk_file sock_file} {create_file_perms execute };
+allow domain file:file execute_no_trans;
 allow domain file:dir { create_dir_perms };
 allow domain {null_device_t console_device_t memory_device_t random_device_t device_t}:{file chr_file} create_file_perms;
 allow domain device_t:blk_file create_file_perms;
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message