diff --git a/policy/modules/services/dbus.if b/policy/modules/services/dbus.if index d13a53a52..d28bf8e71 100644 --- a/policy/modules/services/dbus.if +++ b/policy/modules/services/dbus.if @@ -621,6 +621,25 @@ interface(`dbus_use_system_bus_fds',` allow $1 system_dbusd_t:fd use; ') +######################################## +## +## Use PIDFD file descriptors from the +## DBUS system bus. +## +## +## +## Domain allowed access. +## +## +# +interface(`dbus_use_system_bus_pidfds',` + gen_require(` + type system_dbusd_t; + ') + + allow $1 system_dbusd_t:fd use; +') + ######################################## ## ## Do not audit attempts to read and diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 4b880e160..638723e2d 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -610,7 +610,7 @@ ifdef(`init_systemd',` optional_policy(` dbus_connect_system_bus(init_t) - dbus_use_system_bus_fds(init_t) + dbus_use_system_bus_pidfds(init_t) ') optional_policy(`