nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update the dbus role template so that permissions to get

Browse Source 
the attributes of the proc filesystem are included.

Signed-off-by: Guido Trentalancia <guido@trentalancia.com>
---
 policy/modules/contrib/dbus.if |    2 ++
 1 file changed, 2 insertions(+)
This commit is contained in:
Guido Trentalancia 2023-08-30 16:30:54 +02:00
parent 5ff0aa1b61
commit 5b89b4120e
1 changed files with 2 additions and 0 deletions

2
policy/modules/services/dbus.if
View File

@ -106,6 +106,8 @@ template(`dbus_role_template',`
allow $1_dbusd_t $3:process sigkill;
allow $1_dbusd_t session_dbusd_tmp_t:sock_file manage_sock_file_perms;
kernel_getattr_proc($1_dbusd_t)
corecmd_bin_domtrans($1_dbusd_t, $3)
corecmd_shell_domtrans($1_dbusd_t, $3)