nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

systemd: Unit generator fixes.

Browse Source 
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
This commit is contained in:
Chris PeBenito 2021-09-01 19:47:07 +00:00 committed by Chris PeBenito
parent 96ea14ed59
commit 6ce1e64c49
2 changed files with 24 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
policy/modules/system/miscfiles.if
View File

@ -486,6 +486,26 @@ interface(`miscfiles_read_hwdata',`
read_lnk_files_pattern($1, hwdata_t, hwdata_t) read_lnk_files_pattern($1, hwdata_t, hwdata_t)
') ')
########################################
## <summary>
## Allow process to get the attributes of localization info
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`miscfiles_getattr_localization',`
gen_require(`
type locale_t;
')
files_search_usr($1)
allow $1 locale_t:dir list_dir_perms;
allow $1 locale_t:file getattr;
')
######################################## ########################################
## <summary> ## <summary>
## Allow process to setattr localization info ## Allow process to setattr localization info

5
policy/modules/system/systemd.te
View File

@ -438,11 +438,12 @@ allow systemd_generator_t self:capability dac_override;
allow systemd_generator_t self:process setfscreate; allow systemd_generator_t self:process setfscreate;
corecmd_exec_shell(systemd_generator_t) corecmd_exec_shell(systemd_generator_t)
corecmd_getattr_bin_files(systemd_generator_t) corecmd_exec_bin(systemd_generator_t)
dev_read_sysfs(systemd_generator_t) dev_read_sysfs(systemd_generator_t)
dev_write_kmsg(systemd_generator_t) dev_write_kmsg(systemd_generator_t)
dev_write_sysfs_dirs(systemd_generator_t) dev_write_sysfs_dirs(systemd_generator_t)
dev_read_urand(systemd_generator_t)
files_read_etc_files(systemd_generator_t) files_read_etc_files(systemd_generator_t)
files_search_runtime(systemd_generator_t) files_search_runtime(systemd_generator_t)
@ -479,6 +480,8 @@ systemd_log_parse_environment(systemd_generator_t)
term_use_unallocated_ttys(systemd_generator_t) term_use_unallocated_ttys(systemd_generator_t)
udev_search_runtime(systemd_generator_t)
ifdef(`distro_gentoo',` ifdef(`distro_gentoo',`
corecmd_shell_entry_type(systemd_generator_t) corecmd_shell_entry_type(systemd_generator_t)
') ')