Merge branch 'unconfined_module' of git://github.com/cgzones/refpolicy

2017-01-09 18:13:47 -05:00 · 2017-01-09 18:13:47 -05:00 · 694e85cc6f
parent 9387d5c324 b59dc99d56
commit 694e85cc6f
1 changed files with 1 additions and 1 deletions
--- a/policy/modules/system/unconfined.if
+++ b/policy/modules/system/unconfined.if
@ -20,7 +20,7 @@ interface(`unconfined_domain_noaudit',`

 	# Use most Linux capabilities
 	allow $1 self:capability ~sys_module;
-	allow $1 self:capability2 syslog;
+	allow $1 self:capability2 { syslog wake_alarm };
 	allow $1 self:fifo_file manage_fifo_file_perms;

 	# Transition to myself, to make get_ordered_context_list happy.