RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

systemd, ssh, ntp: Read fips_enabled crypto sysctl. 

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
This commit is contained in:
Chris PeBenito 2021-09-01 19:37:19 +00:00 committed by Chris PeBenito
parent 6eb1469ce7
commit 96ea14ed59
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/services/ntp.te
View File

@ -94,6 +94,7 @@ can_exec(ntpd_t, ntpd_exec_t)
kernel_read_kernel_sysctls(ntpd_t)
kernel_read_system_state(ntpd_t)
kernel_read_network_state(ntpd_t)
kernel_read_crypto_sysctls(ntpd_t)
kernel_request_load_module(ntpd_t)
corenet_all_recvfrom_netlabel(ntpd_t)

1
policy/modules/services/ssh.if
View File

@ -214,6 +214,7 @@ template(`ssh_server_template', `
kernel_read_kernel_sysctls($1_t)
kernel_read_network_state($1_t)
kernel_read_crypto_sysctls($1_t)
corenet_all_recvfrom_netlabel($1_t)
corenet_tcp_sendrecv_generic_if($1_t)

1
policy/modules/system/systemd.te
View File

@ -577,6 +577,7 @@ optional_policy(`
dontaudit systemd_log_parse_env_type self:capability net_admin;
kernel_read_system_state(systemd_log_parse_env_type)
kernel_read_crypto_sysctls(systemd_log_parse_env_type)
dev_write_kmsg(systemd_log_parse_env_type)