nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Also grant directory permissions in sysnet_manage_config

Browse Source 
On systemd, systemd-networkd keeps its configuration in
/etc/systemd/network, where both files and directories are labelled as
net_conf_t. When granting network configuration management permissions
also include directory management rights when systemd is in use.

This fixes denials from udev trying to parse systemd network
configuration.

Signed-off-by: Krzysztof Nowicki <krissn@op.pl>
This commit is contained in:
Krzysztof Nowicki 2020-08-12 14:26:35 +02:00
parent ba9fa00010
commit 2cd6ffb654
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/system/sysnetwork.if
View File

@ -541,6 +541,10 @@ interface(`sysnet_manage_config',`
ifdef(`distro_redhat',`
manage_files_pattern($1, net_conf_t, net_conf_t)
')
ifdef(`init_systemd',`
manage_files_pattern($1, net_conf_t, net_conf_t)
')
')
#######################################