diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 6192b8e5f..1a86fe299 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -410,6 +410,10 @@ ifdef(`distro_gentoo',` # init scripts touch this clock_dontaudit_write_adjtime(initrc_t) + # for integrated run_init to read run_init_type. + # happens during boot (/sbin/rc execs init scripts) + seutil_read_default_contexts(initrc_t) + optional_policy(` arpwatch_manage_data_files(initrc_t) ') @@ -456,10 +460,6 @@ ifdef(`distro_redhat',` miscfiles_read_fonts(initrc_t) miscfiles_read_hwdata(initrc_t) - # for integrated run_init to read run_init_type. - # happens during boot (/sbin/rc execs init scripts) - seutil_read_default_contexts(initrc_t) - optional_policy(` bind_manage_config_dirs(initrc_t) bind_write_config(initrc_t)