From 2cd6ffb654de36894b33ad78fd2ef5a6324cc148 Mon Sep 17 00:00:00 2001 From: Krzysztof Nowicki Date: Wed, 12 Aug 2020 14:26:35 +0200 Subject: [PATCH] Also grant directory permissions in sysnet_manage_config On systemd, systemd-networkd keeps its configuration in /etc/systemd/network, where both files and directories are labelled as net_conf_t. When granting network configuration management permissions also include directory management rights when systemd is in use. This fixes denials from udev trying to parse systemd network configuration. Signed-off-by: Krzysztof Nowicki --- policy/modules/system/sysnetwork.if | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/system/sysnetwork.if b/policy/modules/system/sysnetwork.if index ffe100b37..fb92a09e6 100644 --- a/policy/modules/system/sysnetwork.if +++ b/policy/modules/system/sysnetwork.if @@ -541,6 +541,10 @@ interface(`sysnet_manage_config',` ifdef(`distro_redhat',` manage_files_pattern($1, net_conf_t, net_conf_t) ') + + ifdef(`init_systemd',` + manage_files_pattern($1, net_conf_t, net_conf_t) + ') ') #######################################