[refpolicy] [PATCH] init: run sysvinit without the dangerous unconfined_domain() call

[aranea@aixah.de (Luis Ressel)]

On Tue, 27 Dec 2016 23:16:46 +0100 (CET)
Guido Trentalancia via refpolicy <refpolicy@oss.tresys.com> wrote:

> The aim of this patch is to start securing the init module so
> that it can run in confined mode instead of in the most unsafe
> unconfined mode.
> 
> At the moment it has been fully tested only with sysvinit.
> 
> Testing with other init daemons is needed before this is
> released, so a "permissive" statement has been added in
> order to log further needed permissions during this testing
> phase (with systemd, upstart, and so on).
> 
> [...]
>
> +permissive init_t;

Please don't add that. Debugging statements such as this one should
only be added to local policies, not to refpol's master branch. This
statement would be a huge step backwards for everyone who isn't using
the 'unconfined' module.

Regards,
Luis