RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

yet more strict patches fixed 

More little strict patches, much of which are needed for KDE.

With the lines that Chris didn't like removed.

Signed-off-by: Russell Coker <russell@coker.com.au>
This commit is contained in:
Russell Coker 2021-01-15 10:37:20 +11:00 committed by Chris PeBenito
parent a686e854af
commit c42c407bdc
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
policy/modules/system/userdomain.if
View File

@ -877,6 +877,10 @@ template(`userdom_common_user_template',`
systemd_role_template($1, $1_r, $1_t) systemd_role_template($1, $1_r, $1_t)
') ')
optional_policy(`
udev_read_runtime_files($1_t)
')
optional_policy(` optional_policy(`
usernetctl_run($1_t, $1_r) usernetctl_run($1_t, $1_r)
') ')
@ -1229,6 +1233,15 @@ template(`userdom_unpriv_user_template', `
optional_policy(` optional_policy(`
systemd_dbus_chat_logind($1_t) systemd_dbus_chat_logind($1_t)
systemd_use_logind_fds($1_t)
systemd_dbus_chat_hostnamed($1_t)
systemd_write_inherited_logind_inhibit_pipes($1_t)
# kwalletd5 inherits a socket from init
init_rw_inherited_stream_socket($1_t)
init_use_fds($1_t)
# for polkit-kde-auth
init_read_state($1_t)
') ')
# Allow controlling usbguard # Allow controlling usbguard