Allow semanage_t to connect to system D-Bus bus

This is needed as systemd NSS modules is talking to systemd/PID1 over D-Bus
2018-11-01 15:14:43 +01:00 · 2018-11-01 15:14:43 +01:00 · 6060f35f03
parent 2f054c67a2
commit 6060f35f03
1 changed files with 7 additions and 0 deletions
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@ -552,6 +552,13 @@ ifdef(`distro_ubuntu',`
 	')
 ')

+ifdef(`init_systemd',`
+	optional_policy(`
+		init_dbus_chat(semanage_t)
+		dbus_system_bus_client(semanage_t)
+	')
+')
+
 optional_policy(`
 	locallogin_use_fds(semanage_t)
 ')