RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ntp: allow systemd-timesyn to watch dbus objects 

Fixes:

avc:  denied  { watch } for  pid=68 comm="systemd-timesyn"
path="/run/dbus" dev="tmpfs" ino=2707 scontext=system_u:system_r:ntpd_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=dir
permissive=1

avc:  denied  { watch } for  pid=68 comm="systemd-timesyn"
path="/run/dbus/system_bus_socket" dev="tmpfs" ino=2716
scontext=system_u:system_r:ntpd_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=sock_file
permissive=1

Signed-off-by: Antoine Tenart <antoine.tenart@bootlin.com>
This commit is contained in:
Antoine Tenart 2020-10-05 16:54:57 +02:00
parent e9228b49bb
commit 32e5008867
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/ntp.te
View File

@ -143,6 +143,8 @@ ifdef(`init_systemd',`
dbus_system_bus_client(ntpd_t) dbus_system_bus_client(ntpd_t)
dbus_connect_system_bus(ntpd_t) dbus_connect_system_bus(ntpd_t)
dbus_watch_system_bus_runtime_dirs(ntpd_t)
dbus_watch_system_bus_runtime_named_sockets(ntpd_t)
init_dbus_chat(ntpd_t) init_dbus_chat(ntpd_t)
init_get_system_status(ntpd_t) init_get_system_status(ntpd_t)
init_list_unit_dirs(ntpd_t) init_list_unit_dirs(ntpd_t)