nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

zfs: allow sending signals to itself

Browse Source 
Required for zfs snapshot.

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2023-03-02 02:04:40 -05:00
parent 214149b637
commit 18c1eeb654
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/zfs.te
View File

@ -76,7 +76,7 @@ zfs_rw_zpool_cache(zed_t)
# zfs local policy
#
allow zfs_t self:process { getsched signull };
allow zfs_t self:process { getsched signal signull };
allow zfs_t self:capability { sys_admin sys_rawio };
allow zfs_t self:fifo_file rw_fifo_file_perms;