diff options
Diffstat (limited to 'gpsd.te')
-rw-r--r-- | gpsd.te | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -18,3 +18,11 @@ allow gpsd gps_device:chr_file rw_file_perms; # Execute the shell or system commands. allow gpsd shell_exec:file rx_file_perms; allow gpsd system_file:file rx_file_perms; + +### +### neverallow +### + +# gpsd can never have capabilities other than block_suspend +neverallow gpsd self:capability *; +neverallow gpsd self:capability2 ~block_suspend; |