RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

systemd: allow systemd-networkd to read init runtime files 

If started from an initrd and the kernel is configured for networking at
early boot, systemd-networkd needs access to files for the network
configuration in /run/systemd/network which are still init_runtime_t
during early boot. systemd will later relabel these files after the
policy is loaded.

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-05-20 11:30:10 -04:00
parent 998ef975f3
commit ec1d3be3f7
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/systemd.te
View File

@ -1068,6 +1068,7 @@ auth_use_nsswitch(systemd_networkd_t)
init_dgram_send(systemd_networkd_t) init_dgram_send(systemd_networkd_t)
init_read_state(systemd_networkd_t) init_read_state(systemd_networkd_t)
init_read_runtime_files(systemd_networkd_t)
init_runtime_filetrans(systemd_networkd_t, systemd_networkd_runtime_t, dir) init_runtime_filetrans(systemd_networkd_t, systemd_networkd_runtime_t, dir)
logging_send_syslog_msg(systemd_networkd_t) logging_send_syslog_msg(systemd_networkd_t)