Merge pull request #54 from pebenito/init-script-systemd

2019-06-09 13:26:40 -04:00 · 2019-06-09 13:26:40 -04:00 · 480793eeb7
commit 480793eeb7
parent 3a6b7c1856 4aafedd872
1 changed files with 6 additions and 0 deletions
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@ -99,6 +99,12 @@ interface(`init_script_domain',`
 	role system_r types $1;

 	domtrans_pattern(init_run_all_scripts_domain, $2, $1)
+
+	ifdef(`init_systemd',`
+		allow $1 init_t:unix_stream_socket { getattr read write ioctl };
+
+		allow init_t $1:process2 { nnp_transition nosuid_transition };
+	')
 ')

 ########################################