RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

unconfined: Fix systemd --user rule. 

Use the full init_pgm_spec_user_daemon_domain() to ensure correct
permissions.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
This commit is contained in:
Chris PeBenito 2019-11-22 16:39:35 -05:00
parent 04a83b9616
commit 42d115aa53
2 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
policy/modules/system/init.if
View File

@ -672,12 +672,7 @@ interface(`init_domtrans',`
## </desc> ## </desc>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
## Domain allowed to transition. ## The type to be used as a systemd --user domain.
## </summary>
## </param>
## <param name="domain">
## <summary>
## New domain.
## </summary> ## </summary>
## </param> ## </param>
# #

2
policy/modules/system/unconfined.te
View File

@ -62,7 +62,7 @@ ifdef(`init_systemd',`
# for systemd-analyze # for systemd-analyze
init_service_status(unconfined_t) init_service_status(unconfined_t)
# for systemd --user: # for systemd --user:
init_pgm_entrypoint(unconfined_t) init_pgm_spec_user_daemon_domain(unconfined_t)
optional_policy(` optional_policy(`
systemd_dbus_chat_resolved(unconfined_t) systemd_dbus_chat_resolved(unconfined_t)