add permissive domain to README
This commit is contained in:
parent
1759add2b6
commit
34d8165edd
11
README.txt
11
README.txt
@ -1,5 +1,6 @@
|
||||
Injects allow rules into binary SELinux kernel policies
|
||||
|
||||
Injecting a rule:
|
||||
$ ./sepolicy-inject -s shell -t system -c file -p read -P sepolicy -o sepolicy2
|
||||
libsepol.policydb_index_others: security: 1 users, 2 roles, 518 types, 14 bools
|
||||
libsepol.policydb_index_others: security: 1 sens, 1024 cats
|
||||
@ -14,11 +15,19 @@ Found 2 semantic av rules:
|
||||
allow shell system : file read ;
|
||||
allow appdomain domain : file { ioctl read getattr lock open } ;
|
||||
|
||||
Injecting a permissive domain:
|
||||
$ ./sepolicy-inject -Z shell -P sepolicy -o sepolicy2
|
||||
|
||||
$ seinfo sepolicy | grep Permissive
|
||||
Permissives: 0 Polcap: 2
|
||||
|
||||
$ seinfo sepolicy2 | grep Permissive
|
||||
Permissives: 1 Polcap: 2
|
||||
|
||||
|
||||
TODO:
|
||||
|
||||
Insert multiple rules at the same time
|
||||
Remove rules
|
||||
Use attributes
|
||||
Add permissive domains
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user