make selinux policy optional.

p3ck · Oct 16, 2014 · 5e691e1 · 5e691e1
1 parent bf03d3e
commit 5e691e1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/selinux/restraint.te b/selinux/restraint.te
@@ -1,5 +1,6 @@
 policy_module(restraint, 1.0)
 
+optional_policy(`
 gen_require(`
     type unconfined_t;
     type unconfined_service_t;
@@ -8,3 +9,4 @@ gen_require(`
 allow unconfined_service_t unconfined_exec_t:file entrypoint;
 allow unconfined_service_t unconfined_t:process transition;
 type_transition unconfined_service_t unconfined_exec_t:process unconfined_t;
+')