RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #313 from bootlin/buildroot-systemd-fixes

This commit is contained in:
Chris PeBenito 2020-10-09 09:42:40 -04:00
parent b5525a3fca 35a417d0ef
commit 785677771d
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/ntp.te
View File

@ -139,10 +139,14 @@ userdom_dontaudit_use_unpriv_user_fds(ntpd_t)
userdom_list_user_home_dirs(ntpd_t) userdom_list_user_home_dirs(ntpd_t)
ifdef(`init_systemd',` ifdef(`init_systemd',`
allow ntpd_t self:process setfscreate;
allow ntpd_t ntpd_unit_t:file read_file_perms; allow ntpd_t ntpd_unit_t:file read_file_perms;
dbus_system_bus_client(ntpd_t) dbus_system_bus_client(ntpd_t)
dbus_connect_system_bus(ntpd_t) dbus_connect_system_bus(ntpd_t)
dbus_watch_system_bus_runtime_dirs(ntpd_t)
dbus_watch_system_bus_runtime_named_sockets(ntpd_t)
init_dbus_chat(ntpd_t) init_dbus_chat(ntpd_t)
init_get_system_status(ntpd_t) init_get_system_status(ntpd_t)
init_list_unit_dirs(ntpd_t) init_list_unit_dirs(ntpd_t)

3
policy/modules/system/systemd.te
View File

@ -409,6 +409,8 @@ storage_raw_read_fixed_disk(systemd_generator_t)
systemd_log_parse_environment(systemd_generator_t) systemd_log_parse_environment(systemd_generator_t)
term_use_unallocated_ttys(systemd_generator_t)
optional_policy(` optional_policy(`
fstools_exec(systemd_generator_t) fstools_exec(systemd_generator_t)
') ')
@ -792,6 +794,7 @@ dev_write_kmsg(systemd_networkd_t)
files_read_etc_files(systemd_networkd_t) files_read_etc_files(systemd_networkd_t)
files_watch_runtime_dirs(systemd_networkd_t) files_watch_runtime_dirs(systemd_networkd_t)
files_watch_root_dirs(systemd_networkd_t) files_watch_root_dirs(systemd_networkd_t)
files_list_runtime(systemd_networkd_t)
fs_getattr_xattr_fs(systemd_networkd_t) fs_getattr_xattr_fs(systemd_networkd_t)
auth_use_nsswitch(systemd_networkd_t) auth_use_nsswitch(systemd_networkd_t)