systemd: use stream socket perms in systemd_user_app_status

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-01-17 15:52:00 -05:00
parent a3f32e322b
commit 4be52b7fb3

View File

@ -289,7 +289,7 @@ template(`systemd_user_app_status',`
ps_process_pattern($1_systemd_t, $2)
allow $1_systemd_t $2:process signal_perms;
allow $2 $1_systemd_t:fd use;
allow $2 $1_systemd_t:unix_stream_socket rw_socket_perms;
allow $2 $1_systemd_t:unix_stream_socket rw_stream_socket_perms;
# apps run by systemd --user instances need to be able to read the
# state of the systemd --user instance