From 6ce9865e6c85dc6b014b74c43db93963a1820b83 Mon Sep 17 00:00:00 2001 From: bauen1 Date: Sat, 12 Oct 2019 15:51:53 +0200 Subject: [PATCH] systemd: fixed systemd_rfkill_t denial spam Signed-off-by: bauen1 --- policy/modules/system/systemd.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index bff2471cf..830a2399b 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -1072,6 +1072,8 @@ optional_policy(` # Rfkill local policy # +allow systemd_rfkill_t self:netlink_kobject_uevent_socket { bind create getattr read setopt }; + manage_dirs_pattern(systemd_rfkill_t, systemd_rfkill_var_lib_t, systemd_rfkill_var_lib_t) manage_files_pattern(systemd_rfkill_t, systemd_rfkill_var_lib_t, systemd_rfkill_var_lib_t) init_var_lib_filetrans(systemd_rfkill_t, systemd_rfkill_var_lib_t, dir)