Allowing access other then permissive mode.

[Kernel freak <kernelfreak@xxxxxxxxx>]

Hello friends,

                    I am starting a new thread to achieve the objective. I want to attach my own piece of code wherever SELinux takes access decision or Policy decision point. So for example, whenever it queries the database to check the rule, I want to return "allowed" everytime through code and not by using Permissive mode. It is very important I don't use permissive mode.

My point of confusion is which part of code I should look to see where there is a policy decision point where database is queried. As far as I understand, a return of '0' means access is allowed. I tried hardcoding rc=0 in many situations, but there are a lot of denials I am getting.

Kindly let me know. Thank you for your time.

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.