selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default
authorPaul Moore <pmoore@redhat.com>
Wed, 21 Oct 2015 21:44:25 +0000 (17:44 -0400)
committerPaul Moore <pmoore@redhat.com>
Wed, 21 Oct 2015 21:44:25 +0000 (17:44 -0400)
commit2a35d196c160e352fa56eabb7952f78f4c85f577
treedb364a2d2b8e8e0a352b30b2ae423547501e8841
parent09302fd19efbff9569eaad3f78ead8f411defd87
selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default

Change the SELinux checkreqprot default value to 0 so that SELinux
performs access control checking on the actual memory protections
used by the kernel and not those requested by the application.

Signed-off-by: Paul Moore <pmoore@redhat.com>
security/selinux/Kconfig