RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

When using systemd_tmpfilesd_managed also grant directory permissions 

This allows systemd-tmpfilesd to create files inside directories
belonging to the subject domain.

Signed-off-by: Krzysztof Nowicki <krissn@op.pl>
This commit is contained in:
Krzysztof Nowicki 2021-02-03 07:35:13 +01:00
parent 0111384000
commit b30437e487
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/systemd.if
View File

@ -1174,6 +1174,7 @@ interface(`systemd_tmpfilesd_managed',`
type systemd_tmpfiles_t;
')
allow systemd_tmpfiles_t $1:dir list_dir_perms;
allow systemd_tmpfiles_t $1:$2 { setattr relabelfrom relabelto create };
')