RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

init, mount: allow systemd to watch utab 

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-03-13 21:31:27 -05:00
parent c56b78f0c8
commit 2166acf355
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/system/init.te
View File

@ -446,7 +446,11 @@ ifdef(`init_systemd',`
miscfiles_watch_localization(init_t) miscfiles_watch_localization(init_t)
# systemd watches utab in order to mount the
# local filesystem at boot
mount_watch_runtime_dirs(init_t) mount_watch_runtime_dirs(init_t)
mount_watch_runtime_files(init_t)
mount_watch_reads_runtime_files(init_t)
# systemd_socket_activated policy # systemd_socket_activated policy
mls_socket_write_all_levels(init_t) mls_socket_write_all_levels(init_t)