blob: 023e45790c12fed62b961620a3f8f63131641e47 [file] [log] [blame]
# Life begins with the kernel.
type kernel, domain;
permissive kernel;
# The kernel is unconfined.
unconfined_domain(kernel)
relabelto_domain(kernel)
allow kernel {fs_type dev_type file_type}:dir_file_class_set relabelto;