From de026627fe614f9d2a80597594e9bae3d8301148 Mon Sep 17 00:00:00 2001 From: Guido Trentalancia Date: Wed, 30 Aug 2023 16:07:13 +0200 Subject: [PATCH] Fix the dbus module so that automatic file type transitions are used not only for files and directories, but also for named sockets. Signed-off-by: Guido Trentalancia --- policy/modules/contrib/dbus.te | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) --- policy/modules/services/dbus.te | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te index 4c6e5d7f1..f0d2cca61 100644 --- a/policy/modules/services/dbus.te +++ b/policy/modules/services/dbus.te @@ -102,7 +102,7 @@ read_lnk_files_pattern(system_dbusd_t, dbusd_etc_t, dbusd_etc_t) manage_dirs_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) manage_files_pattern(system_dbusd_t, system_dbusd_tmp_t, system_dbusd_tmp_t) -files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { dir file }) +files_tmp_filetrans(system_dbusd_t, system_dbusd_tmp_t, { dir file sock_file }) manage_files_pattern(system_dbusd_t, system_dbusd_tmpfs_t, system_dbusd_tmpfs_t) fs_tmpfs_filetrans(system_dbusd_t, system_dbusd_tmpfs_t, file) @@ -113,7 +113,7 @@ read_files_pattern(system_dbusd_t, system_dbusd_var_lib_t, system_dbusd_var_lib_ manage_dirs_pattern(system_dbusd_t, system_dbusd_runtime_t, system_dbusd_runtime_t) manage_files_pattern(system_dbusd_t, system_dbusd_runtime_t, system_dbusd_runtime_t) manage_sock_files_pattern(system_dbusd_t, system_dbusd_runtime_t, system_dbusd_runtime_t) -files_runtime_filetrans(system_dbusd_t, system_dbusd_runtime_t, { dir file }) +files_runtime_filetrans(system_dbusd_t, system_dbusd_runtime_t, { dir file sock_file }) can_exec(system_dbusd_t, dbusd_exec_t) @@ -297,7 +297,7 @@ userdom_user_home_dir_filetrans(session_bus_type, session_dbusd_home_t, dir, ".d manage_dirs_pattern(session_bus_type, session_dbusd_tmp_t, session_dbusd_tmp_t) manage_files_pattern(session_bus_type, session_dbusd_tmp_t, session_dbusd_tmp_t) -files_tmp_filetrans(session_bus_type, session_dbusd_tmp_t, { dir file }) +files_tmp_filetrans(session_bus_type, session_dbusd_tmp_t, { dir file sock_file }) manage_dirs_pattern(session_bus_type, session_dbusd_runtime_t, session_dbusd_runtime_t) manage_files_pattern(session_bus_type, session_dbusd_runtime_t, session_dbusd_runtime_t)