RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-29 14:56:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

init: Add NoNewPerms support for systemd.

Browse Source
This commit is contained in:
Chris PeBenito 2017-08-05 12:22:05 -04:00
parent c51b772d2f
commit acac1fcf4e
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/init.if
View File

@ -131,6 +131,8 @@ interface(`init_domain',`
ifdef(`init_systemd',`
allow $1 init_t:unix_stream_socket { getattr read write ioctl };
allow init_t $1:process2 { nnp_transition nosuid_transition };
')
')

2
policy/modules/system/init.te
View File

@ -1,4 +1,4 @@
policy_module(init, 2.2.24)
policy_module(init, 2.2.25)
gen_require(`
class passwd rootok;