summaryrefslogtreecommitdiffstats
path: root/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
diff options
context:
space:
mode:
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch')
-rw-r--r--recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch7
1 files changed, 2 insertions, 5 deletions
diff --git a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
index 7a72f18..b5ca0f8 100644
--- a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
+++ b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch
@@ -35,13 +35,10 @@ diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
35index d710fb0..f9d7114 100644 35index d710fb0..f9d7114 100644
36--- a/policy/modules/system/init.te 36--- a/policy/modules/system/init.te
37+++ b/policy/modules/system/init.te 37+++ b/policy/modules/system/init.te
38@@ -1100,4 +1100,8 @@ optional_policy(` 38@@ -1114,3 +1114,7 @@ optional_policy(`
39 # systemd related allow rules
40 allow kernel_t init_t:process dyntransition; 39 allow kernel_t init_t:process dyntransition;
41 allow devpts_t device_t:filesystem associate; 40 allow devpts_t device_t:filesystem associate;
42-allow init_t self:capability2 block_suspend; 41 allow init_t self:capability2 block_suspend;
43\ No newline at end of file
44+allow init_t self:capability2 block_suspend;
45+allow init_t self:capability2 audit_read; 42+allow init_t self:capability2 audit_read;
46+ 43+
47+allow initrc_t init_t:system { start status }; 44+allow initrc_t init_t:system { start status };