commit c17a01dfeeadc3dcf7b9cbd62d5342619843ff32
author Robert Craig <rpcraig@tycho.ncsc.mil> Mon Feb 24 11:35:25 2014 -0800
committer Nick Kralevich <nnk@google.com> Mon Feb 24 11:35:25 2014 -0800
tree ca8f33fc482f36dd0c939bf65041c87473cbe985
parent d96d17b577f7036c29859373719f770d14feea99

Make kickstart domain enforcing.

Change-Id: Ib563b78cb1e14ca791ad8a505c14846ffd074949
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

sepolicy/kickstart.te

diff --git a/sepolicy/kickstart.te b/sepolicy/kickstart.te
index a20fffa..30bc946 100644
--- a/sepolicy/kickstart.te
+++ b/sepolicy/kickstart.te
@@ -4,8 +4,6 @@
 
 init_daemon_domain(kickstart)
 
-permissive_or_unconfined(kickstart)
-
 # Run kickstart_checker.sh
 allow kickstart shell_exec:file { entrypoint read };
 allow kickstart kickstart_exec:file { getattr open execute_no_trans };