quota: allow quota to modify /aquota even if immutable

Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-05-09 09:39:33 +02:00
parent 0ff1f78619
commit 2b11987003
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
1 changed files with 1 additions and 1 deletions

View File

@ -33,7 +33,7 @@ files_pid_file(quota_nld_runtime_t)
# Local policy
#
allow quota_t self:capability { dac_override sys_admin };
allow quota_t self:capability { dac_override sys_admin linux_immutable };
dontaudit quota_t self:capability sys_tty_config;
allow quota_t self:process signal_perms;