blob: 14bf7b7e60cba24ec9a9e39003a46d5e4f1116ae (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
<manifest>
<request>
<domain name="_" />
</request>
<assign>
<!-- The exec label is needed because the agent is ran
directly by the kernel, not resourced. Since the
kernel doesn't have any SMACK label on its own,
such processes get the default SMACK label which
doesn't confer the needed privilege. -->
<filesystem path="/usr/bin/resourced-watchdog-handler" label="System" exec_label="System"/>
</assign>
</manifest>
|
