nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'newrole_fixes' of git://github.com/cgzones/refpolicy

Browse Source
This commit is contained in:
Chris PeBenito 2017-02-26 11:58:43 -05:00
commit 15f0cc4fe1
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
policy/modules/system/selinuxutil.te
View File

@ -222,6 +222,7 @@ optional_policy(`
#
allow newrole_t self:capability { dac_override fowner setgid setuid };
dontaudit newrole_t self:capability net_admin;
allow newrole_t self:process setexec;
allow newrole_t self:fd use;
allow newrole_t self:fifo_file rw_fifo_file_perms;
@ -280,6 +281,7 @@ auth_use_nsswitch(newrole_t)
auth_run_chk_passwd(newrole_t, newrole_roles)
auth_run_upd_passwd(newrole_t, newrole_roles)
auth_rw_faillog(newrole_t)
auth_use_pam_systemd(newrole_t)
# Write to utmp.
init_rw_utmp(newrole_t)
@ -328,6 +330,10 @@ tunable_policy(`allow_polyinstantiation',`
files_polyinstantiate_all(newrole_t)
')
optional_policy(`
systemd_use_logind_fds(newrole_t)
')
########################################
#
# Restorecond local policy