resourced.manifest

   1 <manifest>
   2         <request>
   3                 <domain name="_" />
   4         </request>
   5         <assign>
   6                 <!-- The exec label is needed because the agent is ran
   7                      directly by the kernel, not resourced. Since the
   8                      kernel doesn't have any SMACK label on its own,
   9                      such processes get the default SMACK label which
  10                      doesn't confer the needed privilege. -->
  11                 <filesystem path="/usr/bin/resourced-watchdog-handler" label="System" exec_label="System"/>
  12         </assign>
  13 </manifest>