nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix a few places where command line applications were only granted one of tty or pty permissions and could be used from either 

Signed-off-by: Daniel Burgener <Daniel.Burgener@microsoft.com>
This commit is contained in:
Daniel Burgener 2020-04-30 14:53:31 -04:00
parent 4f846ea99d
commit 5ba931d49d
3 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/apps/loadkeys.te
View File

@ -45,7 +45,7 @@ locallogin_use_fds(loadkeys_t)
miscfiles_read_localization(loadkeys_t)
userdom_use_user_ttys(loadkeys_t)
userdom_use_user_terminals(loadkeys_t)
userdom_list_user_home_content(loadkeys_t)
optional_policy(`

2
policy/modules/services/chronyd.te
View File

@ -142,7 +142,7 @@ sysnet_dns_name_resolve(chronyc_t)
miscfiles_read_localization(chronyc_t)
userdom_use_user_ttys(chronyc_t)
userdom_use_user_terminals(chronyc_t)
chronyd_dgram_send(chronyc_t)
chronyd_read_config(chronyc_t)

3
policy/modules/system/systemd.te
View File

@ -1046,8 +1046,7 @@ miscfiles_read_localization(systemd_passwd_agent_t)
seutil_search_default_contexts(systemd_passwd_agent_t)
userdom_use_user_ttys(systemd_passwd_agent_t)
userdom_use_user_ptys(systemd_passwd_agent_t)
userdom_use_user_terminals(systemd_passwd_agent_t)
optional_policy(`
getty_use_fds(systemd_passwd_agent_t)