On 03/25/2016 06:38 AM, Dominick Grift wrote: > > I noticed that object what is it for? Red Hat reserved a policy capability when they were testing ptrace_child, which they ultimately discarded. So it is presently unused and maybe could be reclaimed? I assume ptrace_child never made it into any RHEL release? Oddly, I see that current Fedora policy still defines a ptrace_child permission in class process, even though the kernel knows nothing about it. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.