authlogin: unix_chkpwd traverses / on sysfs device on Debian

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
2013-11-09 10:44:46 +01:00 · 2013-11-09 10:44:46 +01:00 · a0e88de5e5
parent ec54e42ed9
commit a0e88de5e5
1 changed files with 1 additions and 0 deletions
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@ -105,6 +105,7 @@ domain_dontaudit_use_interactive_fds(chkpwd_t)

 dev_read_rand(chkpwd_t)
 dev_read_urand(chkpwd_t)
+dev_search_sysfs(chkpwd_t)

 files_read_etc_files(chkpwd_t)
 # for nscd