From 5fb8157616d63926e1c40ea880e5a407ce2193fa Mon Sep 17 00:00:00 2001 From: bauen1 Date: Sun, 17 May 2020 16:15:41 +0200 Subject: [PATCH] init: make initrc_t a init_domain to simplify the policy This also allows init_t initrc_t:process2 nnp_transition which can be required if the service isn't targeted. Signed-off-by: bauen1 --- policy/modules/system/init.te | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 5e96d5463..2b86191fb 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -79,10 +79,8 @@ mls_trusted_object(initctl_t) type initrc_t, init_script_domain_type, init_run_all_scripts_domain; type initrc_exec_t, init_script_file_type; -domain_type(initrc_t) -domain_entry_file(initrc_t, initrc_exec_t) +init_domain(initrc_t, initrc_exec_t) init_named_socket_activation(initrc_t, init_runtime_t) -role system_r types initrc_t; # should be part of the true block # of the below init_upstart tunable # but this has a typeattribute in it