On Fri, 28 Mar 2008, Stephen Smalley wrote: > > On Tue, 2008-03-11 at 14:26 -0400, Eric Paris wrote: > > Introduce the concept of a permissive type. A new ebitmap is introduced > > to the policy database which indicates if a given type has the > > permissive bit set or not. This bit is tested for the scontext of any > > denial. The bit is meaningless on types which only appear as the target > > of a decision and never the source. A domain running with a permissive > > type will be allowed to perform any action similarly to when the system > > is globally set permissive. > > > > Signed-off-by: Eric Paris <eparis@xxxxxxxxxx> > > Acked-by: Stephen Smalley <sds@xxxxxxxxxxxxx> > Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/selinux-2.6.git#for-akpm -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
