Lines Matching full:domain
2 type kernel, domain, mlstrustedsubject;
19 # Initial setenforce by init prior to switching to init domain.
24 # Write to /proc/1/oom_adj prior to switching to init domain.
39 # Set checkreqprot by init.rc prior to switching to init domain.
63 # The initial task starts in the kernel domain (assigned via
65 neverallow domain kernel:process { transition dyntransition };
67 # The kernel domain is never entered via an exec, nor should it
68 # ever execute a program outside the rootfs without changing to another domain.
69 # If you encounter an execute_no_trans denial on the kernel domain, then
71 # - The program is a kernel usermodehelper. In this case, define a domain
74 # program was left in the kernel domain and is now trying to execute
