-
由 Stephen Smalley 提交于
If the callee SID is bounded by the caller SID, then allowing the transition to occur poses no risk of privilege escalation and we can therefore safely allow the transition to occur. Add this exemption for both the case where a transition was explicitly requested by the application and the case where an automatic transition is defined in policy. Signed-off-by: NStephen Smalley <sds@tycho.nsa.gov> Reviewed-by: NAndy Lutomirski <luto@amacapital.net> Signed-off-by: NPaul Moore <pmoore@redhat.com>
7b0d0b40