From b30437e4873411f5408138e67cfcab833b242d6e Mon Sep 17 00:00:00 2001 From: Krzysztof Nowicki Date: Wed, 3 Feb 2021 07:35:13 +0100 Subject: [PATCH] When using systemd_tmpfilesd_managed also grant directory permissions This allows systemd-tmpfilesd to create files inside directories belonging to the subject domain. Signed-off-by: Krzysztof Nowicki --- policy/modules/system/systemd.if | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index fb20b528c..6a66a2d79 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -1174,6 +1174,7 @@ interface(`systemd_tmpfilesd_managed',` type systemd_tmpfiles_t; ') + allow systemd_tmpfiles_t $1:dir list_dir_perms; allow systemd_tmpfiles_t $1:$2 { setattr relabelfrom relabelto create }; ')