su: wants to search callers keyring.
Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
parent
6a05763d51
commit
00a1438d82
|
@ -186,6 +186,8 @@ template(`su_role_template',`
|
||||||
allow $1_su_t self:netlink_audit_socket { nlmsg_relay create_netlink_socket_perms };
|
allow $1_su_t self:netlink_audit_socket { nlmsg_relay create_netlink_socket_perms };
|
||||||
allow $1_su_t self:key { search write };
|
allow $1_su_t self:key { search write };
|
||||||
|
|
||||||
|
allow $1_su_t $3:key search;
|
||||||
|
|
||||||
# Transition from the user domain to this domain.
|
# Transition from the user domain to this domain.
|
||||||
domtrans_pattern($3, su_exec_t, $1_su_t)
|
domtrans_pattern($3, su_exec_t, $1_su_t)
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue