logrotate.service sandbox required permissions

Signed-off-by: bauen1 <j2468h@gmail.com>
2020-04-17 20:42:18 +02:00 · 2020-04-17 20:42:18 +02:00 · 0a596401f1
parent d9a58c8434
commit 0a596401f1
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/kernel/files.te
+++ b/policy/modules/kernel/files.te
@ -101,6 +101,10 @@ files_mountpoint(mnt_t)
 type modules_object_t;
 files_type(modules_object_t)

+optional_policy(`
+	init_mountpoint(modules_object_t)
+')
+
 type no_access_t;
 files_type(no_access_t)