diff --git a/policy/modules/services/ntp.if b/policy/modules/services/ntp.if index f1a90c558..7fa20c8d8 100644 --- a/policy/modules/services/ntp.if +++ b/policy/modules/services/ntp.if @@ -79,6 +79,27 @@ interface(`ntp_run',` roleattribute $2 ntpd_roles; ') +######################################## +## +## Send and receive messages from +## ntpd over dbus. +## +## +## +## Domain allowed access. +## +## +# +interface(`ntp_dbus_chat',` + gen_require(` + type ntpd_t; + class dbus send_msg; + ') + + allow $1 ntpd_t:dbus send_msg; + allow ntpd_t $1:dbus send_msg; +') + ######################################## ## ## Execute ntpdate server in the ntpd domain.