diff --git a/policy/modules/services/samhain.te b/policy/modules/services/samhain.te index 9f3620d5c..150c85d20 100644 --- a/policy/modules/services/samhain.te +++ b/policy/modules/services/samhain.te @@ -1,4 +1,4 @@ -policy_module(samhain, 1.0.0) +policy_module(samhain, 1.0.1) ######################################## # @@ -70,3 +70,7 @@ allow samhaind_t { samhain_t self }:process signal_perms; can_exec(samhaind_t, samhain_exec_t) read_files_pattern(samhaind_t, samhain_db_t, samhain_db_t) + +# init script ptys are the stdin/out/err +# when using run_init +init_use_script_ptys(samhaind_t) diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index 60b3e63cb..ed152c47d 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -411,6 +411,7 @@ interface(`init_ranged_system_domain',` ifdef(`enable_mls',` range_transition initrc_t $2:process $3; + mls_rangetrans_target($1) ') ') diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index fc7667d65..0580e7c2e 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -1,4 +1,4 @@ -policy_module(init, 1.16.0) +policy_module(init, 1.16.1) gen_require(` class passwd rootok;