RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #601 from yizhao1/fixes 

Systemd fixes
This commit is contained in:
Chris PeBenito 2023-03-10 09:05:00 -05:00 committed by GitHub
parent d03ecd7118 5e6fad9e4c
commit 86a7f884a5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/system/systemd.te
View File

@ -1576,6 +1576,7 @@ files_read_etc_files(systemd_sysctl_t)
fs_getattr_all_fs(systemd_sysctl_t) fs_getattr_all_fs(systemd_sysctl_t)
fs_search_cgroup_dirs(systemd_sysctl_t) fs_search_cgroup_dirs(systemd_sysctl_t)
fs_search_ramfs(systemd_sysctl_t)
systemd_log_parse_environment(systemd_sysctl_t) systemd_log_parse_environment(systemd_sysctl_t)
@ -1865,7 +1866,7 @@ seutil_libselinux_linked(systemd_user_session_type)
# systemd-userdbd local policy # systemd-userdbd local policy
# #
allow systemd_userdbd_t self:capability dac_read_search; allow systemd_userdbd_t self:capability { dac_read_search sys_resource };
allow systemd_userdbd_t self:process signal; allow systemd_userdbd_t self:process signal;
allow systemd_userdbd_t self:unix_stream_socket create_stream_socket_perms; allow systemd_userdbd_t self:unix_stream_socket create_stream_socket_perms;