RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

acpi.te: Allow acpid_t to shutdown the system - this is required to handle shutdown calls from libvirt. Fixes #298. 

Signed-off-by: Jonathan Davies <jpds@protonmail.com>
This commit is contained in:
Jonathan Davies 2020-08-23 19:48:39 +00:00
parent bdb9ffd00e
commit ec0ebc8b11
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
policy/modules/services/acpi.te
View File

@ -108,6 +108,7 @@ dev_dontaudit_getattr_all_blk_files(acpid_t)
files_exec_etc_files(acpid_t)
files_read_etc_runtime_files(acpid_t)
files_read_usr_files(acpid_t)
files_dontaudit_getattr_all_files(acpid_t)
files_dontaudit_getattr_all_symlinks(acpid_t)
files_dontaudit_getattr_all_pipes(acpid_t)
@ -135,6 +136,8 @@ domain_dontaudit_list_all_domains_state(acpid_t)
auth_use_nsswitch(acpid_t)
init_domtrans_script(acpid_t)
init_telinit(acpid_t)
init_write_initctl(acpid_t)
libs_exec_ld_so(acpid_t)
libs_exec_lib_files(acpid_t)
@ -223,6 +226,12 @@ optional_policy(`
sysnet_domtrans_ifconfig(acpid_t)
')
optional_policy(`
init_list_unit_dirs(acpid_t)
systemd_start_power_units(acpid_t)
systemd_status_power_units(acpid_t)
')
optional_policy(`
udev_read_db(acpid_t)
udev_read_state(acpid_t)