From 4388def2d97c64976f656630dcc24336bf83b23d Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 20 Oct 2015 13:25:57 -0400 Subject: [PATCH] Add refpolicy core socket-activated services. --- policy/modules/system/logging.te | 1 + policy/modules/system/lvm.te | 1 + policy/modules/system/udev.te | 1 + 3 files changed, 3 insertions(+) diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te index b2a02ed28..40180d269 100644 --- a/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te @@ -67,6 +67,7 @@ files_config_file(syslog_conf_t) type syslogd_t; type syslogd_exec_t; init_daemon_domain(syslogd_t, syslogd_exec_t) +init_named_socket_activation(syslogd_t, syslogd_var_run_t) type syslogd_initrc_exec_t; init_script_file(syslogd_initrc_exec_t) diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te index a8c348f55..60d00fe2c 100644 --- a/policy/modules/system/lvm.te +++ b/policy/modules/system/lvm.te @@ -18,6 +18,7 @@ files_pid_file(clvmd_var_run_t) type lvm_t; type lvm_exec_t; init_system_domain(lvm_t, lvm_exec_t) +init_named_socket_activation(lvm_t, lvm_var_run_t) # needs privowner because it assigns the identity system_u to device nodes # but runs as the identity of the sysadmin domain_obj_id_change_exemption(lvm_t) diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index 217876750..966926dd8 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -13,6 +13,7 @@ domain_obj_id_change_exemption(udev_t) domain_entry_file(udev_t, udev_helper_exec_t) domain_interactive_fd(udev_t) init_daemon_domain(udev_t, udev_exec_t) +init_named_socket_activation(udev_t, udev_var_run_t) type udev_etc_t alias etc_udev_t; files_config_file(udev_etc_t)