RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

entropyd: label the unit file of haveged 

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
This commit is contained in:
Nicolas Iooss 2019-08-18 21:20:27 +02:00
parent 230262368b
commit 1ab82b1150
No known key found for this signature in database
GPG Key ID: C191415F340DAAA0
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/entropyd.fc
View File

@ -1,5 +1,7 @@
/etc/rc\.d/init\.d/((audio-entropyd)|(haveged)) -- gen_context(system_u:object_r:entropyd_initrc_exec_t,s0)
/usr/lib/systemd/system/haveged.*\.service -- gen_context(system_u:object_r:entropyd_unit_t,s0)
/usr/bin/audio-entropyd -- gen_context(system_u:object_r:entropyd_exec_t,s0)
/usr/bin/haveged -- gen_context(system_u:object_r:entropyd_exec_t,s0)

3
policy/modules/services/entropyd.te
View File

@ -21,6 +21,9 @@ init_daemon_domain(entropyd_t, entropyd_exec_t)
type entropyd_initrc_exec_t;
init_script_file(entropyd_initrc_exec_t)
type entropyd_unit_t;
init_unit_file(entropyd_unit_t)
type entropyd_var_run_t;
files_pid_file(entropyd_var_run_t)