nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #240 from bauen1/allow-users-to-use-systemd-run

Browse Source
This commit is contained in:
Chris PeBenito 2020-04-24 08:09:10 -04:00
commit 4a3cf58a8c
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/system/systemd.if
View File

@ -24,6 +24,7 @@ template(`systemd_role_template',`
gen_require(`
attribute systemd_user_session_type, systemd_log_parse_env_type;
type systemd_user_runtime_t, systemd_user_runtime_notify_t;
type systemd_run_exec_t;
')
#################################
@ -58,6 +59,8 @@ template(`systemd_role_template',`
# Allow using file descriptors for user environment generators
allow $3 $1_systemd_t:fd use;
can_exec($3, systemd_run_exec_t)
')
######################################