This patch series enables supoprt for two features: 1. Allow the specification of an sebool flag in seapp_contexts, cleaned up per Stephen's requests. A specified sebool= is matched over unspecified sebool=. 2. Allowing spawned apps to launch in the Zygote's context when SELinux is in permissive mode and a match is not found. [PATCH 1/2] Allow zygote to spawn non matched apps in permissive mode [PATCH 2/2] You can now specify a sebool= flag in seapp_contexts -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
