bf1942: Allow self re-execution

[selinux.git] / bf1942 / bf1942.te

diff --git a/bf1942/bf1942.te b/bf1942/bf1942.te
index 54b98fb..7b7800a 100644 (file)
--- a/bf1942/bf1942.te
+++ b/bf1942/bf1942.te
@@ -1,4 +1,4 @@
-policy_module(bf1942, 0.1.4)
+policy_module(bf1942, 0.1.5)
 
 # File context for the executable process
 type bf1942_t;
@@ -28,3 +28,6 @@ sysnet_dns_name_resolve(bf1942_t)
 
 kernel_read_system_state(bf1942_t)
 allow bf1942_t self:process execmem;
+
+# The BF1942 binary executes itself
+allow bf1942_t bf1942_exec_t:file execute_no_trans;