diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-git/refpolicy-update-for_systemd.patch')
| -rw-r--r-- | recipes-security/refpolicy/refpolicy-git/refpolicy-update-for_systemd.patch | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/recipes-security/refpolicy/refpolicy-git/refpolicy-update-for_systemd.patch b/recipes-security/refpolicy/refpolicy-git/refpolicy-update-for_systemd.patch index 86ff0d2..6eba356 100644 --- a/recipes-security/refpolicy/refpolicy-git/refpolicy-update-for_systemd.patch +++ b/recipes-security/refpolicy/refpolicy-git/refpolicy-update-for_systemd.patch | |||
| @@ -8,21 +8,21 @@ It provide, the systemd support related allow rules | |||
| 8 | Upstream-Status: Pending | 8 | Upstream-Status: Pending |
| 9 | 9 | ||
| 10 | Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com> | 10 | Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com> |
| 11 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
| 11 | --- | 12 | --- |
| 12 | policy/modules/system/init.te | 5 +++++ | 13 | policy/modules/system/init.te | 5 +++++ |
| 13 | 1 file changed, 5 insertions(+) | 14 | 1 file changed, 5 insertions(+) |
| 14 | 15 | ||
| 15 | --- a/policy/modules/system/init.te | 16 | --- a/policy/modules/system/init.te |
| 16 | +++ b/policy/modules/system/init.te | 17 | +++ b/policy/modules/system/init.te |
| 17 | @@ -1105,5 +1105,10 @@ optional_policy(` | 18 | @@ -1387,5 +1387,10 @@ dontaudit systemprocess init_t:unix_stre |
| 18 | ') | ||
| 19 | |||
| 20 | optional_policy(` | 19 | optional_policy(` |
| 21 | zebra_read_config(initrc_t) | 20 | userdom_dontaudit_search_user_home_dirs(systemprocess) |
| 21 | userdom_dontaudit_rw_all_users_stream_sockets(systemprocess) | ||
| 22 | userdom_dontaudit_write_user_tmp_files(systemprocess) | ||
| 22 | ') | 23 | ') |
| 23 | + | 24 | + |
| 24 | +# systemd related allow rules | 25 | +# systemd related allow rules |
| 25 | +allow kernel_t init_t:process dyntransition; | 26 | +allow kernel_t init_t:process dyntransition; |
| 26 | +allow devpts_t device_t:filesystem associate; | 27 | +allow devpts_t device_t:filesystem associate; |
| 27 | +allow init_t self:capability2 block_suspend; | 28 | +allow init_t self:capability2 block_suspend; |
| 28 | \ No newline at end of file | ||
