nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

systemd: Add basic systemd-analyze rules. 

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
This commit is contained in:
Chris PeBenito 2024-04-09 09:41:52 -04:00
parent 0dc400529c
commit 739ae42cac
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
policy/modules/system/systemd.te
View File

@ -362,6 +362,29 @@ userdom_user_runtime_content(systemd_user_transient_unit_t)
type power_unit_t;
init_unit_file(power_unit_t)
######################################
#
# Analyze local policy
#
files_get_etc_unit_status(systemd_analyze_t)
init_stream_connect(systemd_analyze_t)
init_get_all_units_status(systemd_analyze_t)
init_service_status(systemd_analyze_t)
init_get_system_status(systemd_analyze_t)
kernel_read_kernel_sysctls(systemd_analyze_t)
kernel_dontaudit_getattr_proc(systemd_analyze_t)
miscfiles_read_localization(systemd_analyze_t)
seutil_libselinux_linked(systemd_analyze_t)
systemd_log_parse_environment(systemd_analyze_t)
userdom_use_inherited_user_terminals(systemd_analyze_t)
######################################
#
# Backlight local policy