unconfined: fixes for bluetooth dbus chat and systemd

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-11-30 12:11:56 -05:00
parent 12b2cd7e55
commit d0ab317582
1 changed files with 5 additions and 0 deletions

View File

@ -60,6 +60,7 @@ ifdef(`init_systemd',`
init_service_status(unconfined_t)
# for systemd --user:
init_pgm_spec_user_daemon_domain(unconfined_t)
allow unconfined_t self:system { status start stop reload };
optional_policy(`
systemd_dbus_chat_resolved(unconfined_t)
@ -76,6 +77,10 @@ optional_policy(`
bind_run_ndc(unconfined_t, unconfined_r)
')
optional_policy(`
bluetooth_dbus_chat(unconfined_t)
')
optional_policy(`
bootloader_run(unconfined_t, unconfined_r)
')