RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

systemd: add interface to read userdb runtime files 

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-06-05 10:36:12 -04:00
parent 324f3fd3f8
commit 1b15d31a1d
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/system/systemd.if
View File

@ -1410,6 +1410,24 @@ interface(`systemd_manage_userdb_runtime_dirs', `
manage_dirs_pattern($1, systemd_userdbd_runtime_t, systemd_userdbd_runtime_t)
')
########################################
## <summary>
## Read systemd userdb runtime files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`systemd_read_userdb_runtime_files', `
gen_require(`
type systemd_userdbd_runtime_t;
')
read_files_pattern($1, systemd_userdbd_runtime_t, systemd_userdbd_runtime_t)
')
########################################
## <summary>
## Manage socket files under /run/systemd/userdb .