This commit is contained in:
Chris PeBenito 2018-11-11 15:52:14 -05:00
commit 390c4f80fb
3 changed files with 9 additions and 0 deletions

View File

@ -28,6 +28,7 @@ allow irqbalance_t self:capability { setpcap };
dontaudit irqbalance_t self:capability sys_tty_config;
allow irqbalance_t self:process { getcap getsched setcap signal_perms };
allow irqbalance_t self:udp_socket create_socket_perms;
allow irqbalance_t self:unix_stream_socket create_stream_socket_perms;
manage_files_pattern(irqbalance_t, irqbalance_pid_t, irqbalance_pid_t)
files_pid_filetrans(irqbalance_t, irqbalance_pid_t, file)

View File

@ -143,6 +143,7 @@ ifdef(`init_systemd',`
init_dbus_chat(ntpd_t)
init_get_system_status(ntpd_t)
allow ntpd_t self:capability { fowner setpcap };
init_read_state(ntpd_t)
init_reload(ntpd_t)
# for /var/lib/systemd/clock

View File

@ -552,6 +552,13 @@ ifdef(`distro_ubuntu',`
')
')
ifdef(`init_systemd',`
optional_policy(`
init_dbus_chat(semanage_t)
dbus_system_bus_client(semanage_t)
')
')
optional_policy(`
locallogin_use_fds(semanage_t)
')