RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

modutils: allow init to execute kmod with nnp 

Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-02-12 17:28:43 +01:00
parent 41963e7116
commit 2e4ac459fa
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
2 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/system/init.te
View File

@ -478,10 +478,6 @@ ifdef(`init_systemd',`
dbus_connect_system_bus(init_t)
')
optional_policy(`
modutils_domtrans(init_t)
')
optional_policy(`
# for systemd --user:
unconfined_search_keys(init_t)
@ -1228,7 +1224,6 @@ optional_policy(`
optional_policy(`
modutils_read_module_config(initrc_t)
modutils_domtrans(initrc_t)
')
optional_policy(`

3
policy/modules/system/modutils.te
View File

@ -9,10 +9,9 @@ attribute_role kmod_roles;
type kmod_t;
type kmod_exec_t;
application_domain(kmod_t, kmod_exec_t)
init_system_domain(kmod_t, kmod_exec_t)
kernel_domtrans_to(kmod_t, kmod_exec_t)
mls_file_write_all_levels(kmod_t)
roleattribute system_r kmod_roles;
role kmod_roles types kmod_t;
# module loading config