irc.te: Allowed client access to screen runtime sock file.

Signed-off-by: Jonathan Davies <jpds@protonmail.com>
2021-04-27 21:07:08 +01:00 · 2021-04-27 21:07:08 +01:00 · 5703b622cd
commit 5703b622cd
parent bad206ee3b
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/apps/irc.te
+++ b/policy/modules/apps/irc.te
@ -132,6 +132,10 @@ tunable_policy(`use_samba_home_dirs',`
 	fs_manage_cifs_symlinks(irc_t)
 ')

+optional_policy(`
+	screen_execute_sock_file(irc_t)
+')
+
 optional_policy(`
 	seutil_use_newrole_fds(irc_t)
 ')