diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index 622bcec57..326581ecc 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -889,6 +889,24 @@ interface(`init_dgram_send',` allow $1 init_t:unix_stream_socket getattr; ') +######################################## +## +## Read and write to inherited init unix streams. +## +## +## +## Domain allowed access. +## +## +# +interface(`init_rw_inherited_stream_socket',` + gen_require(` + type init_t; + ') + + allow $1 init_t:unix_stream_socket { getattr read write ioctl }; +') + ######################################## ## ## Allow the specified domain to read/write to