RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

init: fix systemd boot 

Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-05-16 22:25:40 +02:00
parent 93beef3ce5
commit 0f4eb2a324
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/init.te
View File

@ -447,6 +447,7 @@ ifdef(`init_systemd',`
logging_relabelto_devlog_sock_files(init_t) logging_relabelto_devlog_sock_files(init_t)
logging_relabel_generic_log_dirs(init_t) logging_relabel_generic_log_dirs(init_t)
logging_audit_socket_activation(init_t) logging_audit_socket_activation(init_t)
logging_use_syslogd_fd(init_t)
# lvm2-activation-generator checks file labels # lvm2-activation-generator checks file labels
seutil_read_file_contexts(init_t) seutil_read_file_contexts(init_t)

19
policy/modules/system/logging.if
View File

@ -687,6 +687,25 @@ interface(`logging_send_syslog_msg',`
') ')
') ')
########################################
## <summary>
## Allow domain to use a file descriptor
## from syslogd.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`logging_use_syslogd_fd', `
gen_require(`
type syslogd_t;
')
allow $1 syslogd_t:fd use;
')
######################################## ########################################
## <summary> ## <summary>
## Allow domain to relabelto devlog sock_files ## Allow domain to relabelto devlog sock_files