Lines Matching refs:execute

100             "name": "execute and execute_no_trans",
101             "description": "process label should transform while execute a file",
105                     "perm": "execute execute_no_trans"
119 …check rule 'execute and execute_no_trans' in user mode failed, process label should transform whil…
123 ….json' under 'base/security/selinux_adapter/sepolicy' in 'user' part of 'execute and execute_no_tr…
124         2. Change the policy to avoid violating rule 'execute and execute_no_trans'
126 …check rule 'execute and execute_no_trans' in developer mode failed, process label should transform…
130 …' under 'base/security/selinux_adapter/sepolicy' in 'developer' part of 'execute and execute_no_tr…
131         4. Change the policy to avoid violating rule 'execute and execute_no_trans'
136 上述报错是因为，在user策略和开发者策略中，主体`appspawn`和客体`appspawn_exec`，都同时拥有`execute`和`execute_no_trans`权限：
138 allow appspawn appspawn_exec:file { execute execute_no_trans };
150                 "name": "execute and execute_no_trans",
176 …     check rule 'execute and execute_no_trans' failed in whitelist file 'perm_group_whitelist.json'
177 …    remove the following unnecessary whitelists in rule 'execute and execute_no_trans' part 'user':
179 …     check rule 'execute and execute_no_trans' failed in whitelist file 'perm_group_whitelist.json'
180 …remove the following unnecessary whitelists in rule 'execute and execute_no_trans' part 'developer…
189             "name": "execute and execute_no_trans",
199 这里根据报错，要删除检查项`"execute and execute_no_trans"`下的`user`字段的白名单`"appspawn appspawn_exec"`，另外，其他冗余白名单报错的…