6.2 Simplified domain transition:program

1. Syntax
   program path-to-program;
2. Meaning
   path-to-program is attached domain in normal case. By this, path-to-program is attached domain launched from command line, and /etc/init.d scripts.That is to say, allow domain transition from unconfined domain. However, domain transition from authentication program domain(such as domains for su,login,sshd) is not configured. Which domains are regarded as authentication_domain is configured in authentication_domain field in converter.conf.
   
3. Example
   1)

   {
   domain httpd_t;
   program /usr/sbin/httpd;
   }
   /usr/sbin/httpd is attached httpd_t domain when launched from command
   		line and /etc/init.d script.
   

4. Note
   This element is intended to be used in relaxed policy. This will not mean nothing in more strict policy where there is not unconfined domain.