From 66a480087a78b08b5db98367e9cfe2b31c684d2e Mon Sep 17 00:00:00 2001 From: Chris PeBenito <pebenito@ieee.org> Date: Tue, 5 Sep 2023 10:56:17 -0400 Subject: [PATCH] Update eg25manager.te Minor style fix. Signed-off-by: Chris PeBenito <pebenito@ieee.org> --- policy/modules/services/eg25manager.te | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/policy/modules/services/eg25manager.te b/policy/modules/services/eg25manager.te index 1bd964784..92fd3e4f8 100644 --- a/policy/modules/services/eg25manager.te +++ b/policy/modules/services/eg25manager.te @@ -24,6 +24,11 @@ init_daemon_domain(eg25manager_t, eg25manager_exec_t) type eg25manager_tmp_t; files_tmp_file(eg25manager_tmp_t) +######################################## +# +# Local policy +# + allow eg25manager_t self:netlink_route_socket { bind create getattr nlmsg_read read write }; allow eg25manager_t self:process { signal getsched setsched }; allow eg25manager_t self:tcp_socket { connect create getattr getopt read setopt write }; @@ -42,16 +47,22 @@ dev_read_urand(eg25manager_t) dev_rw_gpiochip(eg25manager_t) corenet_tcp_connect_http_port(eg25manager_t) + dbus_system_bus_client(eg25manager_t) + files_read_etc_files(eg25manager_t) files_read_etc_symlinks(eg25manager_t) files_read_usr_files(eg25manager_t) + logging_send_syslog_msg(eg25manager_t) + miscfiles_read_generic_certs(eg25manager_t) + modemmanager_dbus_chat(eg25manager_t) + sysnet_read_config(eg25manager_t) + systemd_dbus_chat_logind(eg25manager_t) systemd_read_resolved_runtime(eg25manager_t) systemd_use_logind_fds(eg25manager_t) systemd_write_inherited_logind_inhibit_pipes(eg25manager_t) -