nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Systemd tmpfiles fix for kmod.conf from Russell Coker.

Browse Source
This commit is contained in:
Chris PeBenito 2017-02-07 19:03:59 -05:00
parent 69da46ae18
commit 7aafe9d8b7
3 changed files with 23 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/system/modutils.if
View File

@ -333,3 +333,21 @@ interface(`modutils_exec_update_mods',`
corecmd_search_bin($1)
can_exec($1, update_modules_exec_t)
')
########################################
## <summary>
## Read kmod lib files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`modutils_read_var_run_files',`
gen_require(`
type kmod_var_run_t;
')
allow $1 kmod_var_run_t:file read_file_perms;
')

2
policy/modules/system/modutils.te
View File

@ -1,4 +1,4 @@
policy_module(modutils, 1.17.1)
policy_module(modutils, 1.17.2)
########################################
#

5
policy/modules/system/systemd.te
View File

@ -1,4 +1,4 @@
policy_module(systemd, 1.3.1)
policy_module(systemd, 1.3.2)
#########################################
#
@ -355,6 +355,9 @@ auth_manage_login_records(systemd_tmpfiles_t)
auth_relabel_login_records(systemd_tmpfiles_t)
auth_setattr_login_records(systemd_tmpfiles_t)
# for /run/tmpfiles.d/kmod.conf
modutils_read_var_run_files(systemd_tmpfiles_t)
seutil_read_file_contexts(systemd_tmpfiles_t)
systemd_log_parse_environment(systemd_tmpfiles_t)