Merge branch 'sysadm-dynamic-users' of git://github.com/fishilico/selinux-refpolicy

2019-02-13 18:49:35 -05:00 · 2019-02-13 18:49:35 -05:00 · 9508b3bbe9
parent e727079acc 4aa9acca0a
commit 9508b3bbe9
1 changed files with 6 additions and 0 deletions
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@ -71,6 +71,12 @@ ifndef(`enable_mls',`
 	logging_run_auditctl(sysadm_t, sysadm_r)
 ')

+ifdef(`init_systemd',`
+	# Allow sysadm to resolve the username of dynamic users by calling
+	# LookupDynamicUserByUID on org.freedesktop.systemd1.
+	init_dbus_chat(sysadm_t)
+')
+
 tunable_policy(`allow_ptrace',`
 	domain_ptrace_all_domains(sysadm_t)
 ')