diff --git a/policy/modules/system/hostname.te b/policy/modules/system/hostname.te index 4e85d041f..1a5a3581f 100644 --- a/policy/modules/system/hostname.te +++ b/policy/modules/system/hostname.te @@ -17,7 +17,7 @@ role system_r types hostname_t; # sys_admin : for setting the hostname allow hostname_t self:capability sys_admin; -allow hostname_t self:process { sigchld sigkill sigstop signull signal }; +allow hostname_t self:process { sigchld sigkill signal signull sigstop }; allow hostname_t self:unix_stream_socket create_stream_socket_perms; dontaudit hostname_t self:capability sys_tty_config; @@ -56,6 +56,8 @@ sysnet_dontaudit_rw_dhcpc_unix_stream_sockets(hostname_t) sysnet_read_config(hostname_t) sysnet_dns_name_resolve(hostname_t) +userdom_use_inherited_user_terminals(hostname_t) + optional_policy(` nis_use_ypbind(hostname_t) ')