Fix systemd-journal-flush service

This service executes journalctl, which needs access to the journald socket. Signed-off-by: Krzysztof Nowicki <krissn@op.pl>
2020-08-13 21:30:13 +02:00 · 2020-08-13 21:30:13 +02:00 · 0aac6a3d3b
parent 364621e6ec
commit 0aac6a3d3b
1 changed files with 1 additions and 0 deletions
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@ -1057,6 +1057,7 @@ ifdef(`init_systemd',`
 	logging_manage_audit_config(initrc_t)
 	# journalctl:
 	logging_watch_runtime_dirs(initrc_t)
+	logging_manage_runtime_sockets(initrc_t)

 	# lvm2-activation-generator checks file labels
 	seutil_read_file_contexts(initrc_t)