aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <cpebenito@tresys.com>2014-06-19 10:48:38 -0400
committerSven Vermeulen <sven.vermeulen@siphos.be>2014-06-25 20:59:13 +0200
commitfbd16c79b07f6bc3fa4b7555d395d9eb8f2d0514 (patch)
tree02447064a34205860865036927882dfe934d8dbb /build.conf
parentModule version bump for unconfined syslog cap from Nicolas Iooss. (diff)
downloadhardened-refpolicy-fbd16c79b07f6bc3fa4b7555d395d9eb8f2d0514.tar.gz
hardened-refpolicy-fbd16c79b07f6bc3fa4b7555d395d9eb8f2d0514.tar.bz2
hardened-refpolicy-fbd16c79b07f6bc3fa4b7555d395d9eb8f2d0514.zip
Always use the unknown permissions handling build option.
This compile-time feature is in the minimum-required checkpolicy/checkmodule for building the policy, so it should always be used.
Diffstat (limited to 'build.conf')
-rw-r--r--build.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/build.conf b/build.conf
index 5a521c46..0fffc2a4 100644
--- a/build.conf
+++ b/build.conf
@@ -35,7 +35,7 @@ NAME = refpolicy
# can either be allowed, denied, or the policy loading
# can be rejected.
# allow, deny, and reject are current options.
-#UNK_PERMS = deny
+UNK_PERMS = deny
# Direct admin init
# Setting this will allow sysadm to directly