nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

systemd: Updates for generators and kmod-static-nodes.service.

Browse Source 
Signed-off-by: Chris PeBenito <Christopher.PeBenito@microsoft.com>
This commit is contained in:
Chris PeBenito 2022-01-05 17:02:06 +00:00 committed by Chris PeBenito
parent 0b19aaef3c
commit 80598ee30d
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/logging.te
View File

@ -549,6 +549,7 @@ ifdef(`init_systemd',`
init_dgram_send(syslogd_t) init_dgram_send(syslogd_t)
init_read_runtime_pipes(syslogd_t) init_read_runtime_pipes(syslogd_t)
init_read_runtime_symlinks(syslogd_t) init_read_runtime_symlinks(syslogd_t)
init_read_runtime_files(syslogd_t)
init_read_state(syslogd_t) init_read_state(syslogd_t)
# needed for systemd-initrd case when syslog socket is unlabelled # needed for systemd-initrd case when syslog socket is unlabelled

1
policy/modules/system/modutils.fc
View File

@ -10,6 +10,7 @@ ifdef(`distro_gentoo',`
ifdef(`init_systemd',` ifdef(`init_systemd',`
/run/tmpfiles\.d/kmod\.conf -- gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0) /run/tmpfiles\.d/kmod\.conf -- gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0)
/run/tmpfiles\.d/static-nodes\.conf -- gen_context(system_u:object_r:kmod_tmpfiles_conf_t,s0)
') ')
/usr/bin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0) /usr/bin/depmod.* -- gen_context(system_u:object_r:kmod_exec_t,s0)

5
policy/modules/system/systemd.te
View File

@ -506,7 +506,7 @@ systemd_log_parse_environment(systemd_generator_t)
term_use_unallocated_ttys(systemd_generator_t) term_use_unallocated_ttys(systemd_generator_t)
udev_search_runtime(systemd_generator_t) udev_read_runtime_files(systemd_generator_t)
ifdef(`distro_gentoo',` ifdef(`distro_gentoo',`
corecmd_shell_entry_type(systemd_generator_t) corecmd_shell_entry_type(systemd_generator_t)
@ -1442,6 +1442,8 @@ files_runtime_filetrans(systemd_sessions_t, systemd_sessions_runtime_t, file)
fs_getattr_all_fs(systemd_sessions_t) fs_getattr_all_fs(systemd_sessions_t)
fs_search_cgroup_dirs(systemd_sessions_t) fs_search_cgroup_dirs(systemd_sessions_t)
fs_search_tmpfs(systemd_sessions_t)
fs_search_ramfs(systemd_sessions_t)
kernel_read_kernel_sysctls(systemd_sessions_t) kernel_read_kernel_sysctls(systemd_sessions_t)
kernel_dontaudit_getattr_proc(systemd_sessions_t) kernel_dontaudit_getattr_proc(systemd_sessions_t)
@ -1600,6 +1602,7 @@ init_read_state(systemd_tmpfiles_t)
init_relabel_utmp(systemd_tmpfiles_t) init_relabel_utmp(systemd_tmpfiles_t)
init_relabel_var_lib_dirs(systemd_tmpfiles_t) init_relabel_var_lib_dirs(systemd_tmpfiles_t)
init_read_runtime_files(systemd_tmpfiles_t)
logging_manage_generic_logs(systemd_tmpfiles_t) logging_manage_generic_logs(systemd_tmpfiles_t)
logging_manage_generic_log_dirs(systemd_tmpfiles_t) logging_manage_generic_log_dirs(systemd_tmpfiles_t)