From 2b1198700359f8b80890635dc899527e62064d30 Mon Sep 17 00:00:00 2001 From: bauen1 Date: Sat, 9 May 2020 09:39:33 +0200 Subject: [PATCH] quota: allow quota to modify /aquota even if immutable Signed-off-by: bauen1 --- policy/modules/admin/quota.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/admin/quota.te b/policy/modules/admin/quota.te index 13027bbbc..6dbf43888 100644 --- a/policy/modules/admin/quota.te +++ b/policy/modules/admin/quota.te @@ -33,7 +33,7 @@ files_pid_file(quota_nld_runtime_t) # Local policy # -allow quota_t self:capability { dac_override sys_admin }; +allow quota_t self:capability { dac_override sys_admin linux_immutable }; dontaudit quota_t self:capability sys_tty_config; allow quota_t self:process signal_perms;