# | |
# Common neverallow permissions | |
define(`no_w_file_perms', `{ append create link unlink relabelfrom rename setattr write }') | |
define(`no_x_file_perms', `{ execute execute_no_trans }') | |
define(`no_w_dir_perms', `{ add_name create link relabelfrom remove_name rename reparent rmdir setattr write }') |