On 03/25/2016 08:31 AM, Stephen Smalley wrote:
On 03/25/2016 06:38 AM, Dominick Grift wrote:
I noticed that object what is it for?
Red Hat reserved a policy capability when they were testing
ptrace_child, which they ultimately discarded. So it is presently
unused and maybe could be reclaimed? I assume ptrace_child never made
it into any RHEL release?
Oddly, I see that current Fedora policy still defines a ptrace_child
permission in class process, even though the kernel knows nothing about it.
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
We should probably drop it.
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.