diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index 505f45fbd..20d3d2b48 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -1135,6 +1135,24 @@ interface(`init_var_lib_filetrans',` filetrans_pattern($1, init_var_lib_t, $2, $3, $4) ') +###################################### +## +## Allow search directory in the /run/systemd directory. +## +## +## +## Domain allowed access. +## +## +# +interface(`init_search_pid_dirs',` + gen_require(` + type init_var_run_t; + ') + + allow $1 init_var_run_t:dir search_dir_perms; +') + ######################################## ## ## Create files in an init PID directory. @@ -2259,6 +2277,24 @@ interface(`init_rw_script_tmp_files',` rw_files_pattern($1, initrc_tmp_t, initrc_tmp_t) ') +######################################## +## +## Read and write init script inherited temporary data. +## +## +## +## Domain allowed access. +## +## +# +interface(`init_rw_inherited_script_tmp_files',` + gen_require(` + type initrc_tmp_t; + ') + + allow $1 initrc_tmp_t:file rw_inherited_file_perms; +') + ######################################## ## ## Create files in a init script