nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

selinuxutil: permit run_init to read kernel sysctl

Browse Source 
When restarting services with run_init, I got some AVC due to run_init reading /proc/sys/kernel/cap_last_cap

Signed-off-by: Corentin LABBE <clabbe.montjoie@gmail.com>
This commit is contained in:
Corentin LABBE 2023-01-25 21:33:13 +01:00
parent 7fd7f67eb8
commit 727fe91a40
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/selinuxutil.te
View File

@ -450,6 +450,8 @@ init_spec_domtrans_script(run_init_t)
# for utmp # for utmp
init_rw_utmp(run_init_t) init_rw_utmp(run_init_t)
kernel_read_kernel_sysctls(run_init_t)
logging_send_syslog_msg(run_init_t) logging_send_syslog_msg(run_init_t)
miscfiles_read_localization(run_init_t) miscfiles_read_localization(run_init_t)