diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index 9c70afc9a..740b3a925 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -268,6 +268,27 @@ interface(`systemd_read_machines',` allow $1 systemd_machined_var_run_t:file read_file_perms; ') +######################################## +## +## Send and receive messages from +## systemd hostnamed over dbus. +## +## +## +## Domain allowed access. +## +## +# +interface(`systemd_dbus_chat_hostnamed',` + gen_require(` + type systemd_hostnamed_t; + class dbus send_msg; + ') + + allow $1 systemd_hostnamed_t:dbus send_msg; + allow systemd_hostnamed_t $1:dbus send_msg; +') + ######################################## ## ## allow systemd_passwd_agent to inherit fds