You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
21 lines
536 B
21 lines
536 B
4 months ago
|
# Enable new networking controls.
|
||
|
|
policycap network_peer_controls;
|
||
|
|
|
||
|
|
# Enable open permission check.
|
||
|
|
policycap open_perms;
|
||
|
|
|
||
|
|
# Enable separate security classes for
|
||
|
|
# all network address families previously
|
||
|
|
# mapped to the socket class and for
|
||
|
|
# ICMP and SCTP sockets previously mapped
|
||
|
|
# to the rawip_socket class.
|
||
|
|
policycap extended_socket_class;
|
||
|
|
|
||
|
|
# Enable NoNewPrivileges support. Requires libsepol 2.7+
|
||
|
|
# and kernel 4.14 (estimated).
|
||
|
|
#
|
||
|
|
# Checks enabled;
|
||
|
|
# process2: nnp_transition, nosuid_transition
|
||
|
|
#
|
||
|
|
policycap nnp_nosuid_transition;
|