This adds new rules for locking for System to _ and

User to _

Change-Id: Id483970ad6606543fb3856f7d4bdd738e0cf1a9d
Signed-off-by: Michael Demeter <michael.demeter@intel.com>

diff --git a/packaging/default-ac-domains.manifest b/packaging/default-ac-domains.manifest
index 8375f7647d10dfc388bdcc4ea5e12667de3bb0c2..346c08b1a4cffcc57452610a39aa2e9fbcd04eae 100644 (file)
--- a/packaging/default-ac-domains.manifest
+++ b/packaging/default-ac-domains.manifest
@@ -8,6 +8,7 @@
     <request>
       <smack request="System::Shared" type="rwxat"/>
       <smack request="System::Run" type="rwxat"/>
+      <smack request="_" type="l"/>
     </request>
     <permit>
       <smack permit="_" type="wx"/>
@@ -30,6 +31,7 @@
       <smack request="System" type="wx"/>
       <smack request="System::Shared" type="rx"/>
       <smack request="System::Run" type="rwxat"/>
+      <smack request="_" type="l"/>
     </request>
     <permit>
       <smack permit="System" type="rwx"/>