getty: various fixes

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-03-11 21:19:04 -05:00
parent 173d2a2bd0
commit 6371411e50
1 changed files with 3 additions and 0 deletions

View File

@ -55,6 +55,7 @@ allow getty_t getty_tmp_t:file manage_file_perms;
allow getty_t getty_tmp_t:dir manage_dir_perms;
files_tmp_filetrans(getty_t, getty_tmp_t, { file dir })
kernel_read_kernel_sysctls(getty_t)
kernel_read_system_state(getty_t)
# these two needed for receiving faxes
@ -66,6 +67,7 @@ dev_read_sysfs(getty_t)
files_read_etc_runtime_files(getty_t)
files_read_etc_files(getty_t)
files_search_spool(getty_t)
files_dontaudit_search_var_lib(getty_t)
fs_search_auto_mountpoints(getty_t)
# for error condition handling
@ -84,6 +86,7 @@ term_setattr_unallocated_ttys(getty_t)
term_setattr_console(getty_t)
auth_rw_login_records(getty_t)
auth_use_nsswitch(getty_t)
init_rw_utmp(getty_t)