How can i remove net_raw capability from unconfined?

["Gmail" <pag.maurizio@xxxxxxxxx>]

Hi,

 

I need to understand how can i remove net_raw capability from unconfined_t domain, someone can help me?

I  need the source policy? Or can i remove another way? The systems are RHEL 6 and RHEL 7.

 

Thanks in advance,

 

Maurizio Pagani (LordFire in  #SELinux)

---

Questa e-mail è stata controllata per individuare virus con Avast antivirus. www.avast.com

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.