diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch')
| -rw-r--r-- | recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch index 7a72f18..b5ca0f8 100644 --- a/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch +++ b/recipes-security/refpolicy/refpolicy-minimum/0001-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch | |||
| @@ -35,13 +35,10 @@ diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te | |||
| 35 | index d710fb0..f9d7114 100644 | 35 | index d710fb0..f9d7114 100644 |
| 36 | --- a/policy/modules/system/init.te | 36 | --- a/policy/modules/system/init.te |
| 37 | +++ b/policy/modules/system/init.te | 37 | +++ b/policy/modules/system/init.te |
| 38 | @@ -1100,4 +1100,8 @@ optional_policy(` | 38 | @@ -1114,3 +1114,7 @@ optional_policy(` |
| 39 | # systemd related allow rules | ||
| 40 | allow kernel_t init_t:process dyntransition; | 39 | allow kernel_t init_t:process dyntransition; |
| 41 | allow devpts_t device_t:filesystem associate; | 40 | allow devpts_t device_t:filesystem associate; |
| 42 | -allow init_t self:capability2 block_suspend; | 41 | allow init_t self:capability2 block_suspend; |
| 43 | \ No newline at end of file | ||
| 44 | +allow init_t self:capability2 block_suspend; | ||
| 45 | +allow init_t self:capability2 audit_read; | 42 | +allow init_t self:capability2 audit_read; |
| 46 | + | 43 | + |
| 47 | +allow initrc_t init_t:system { start status }; | 44 | +allow initrc_t init_t:system { start status }; |
