blob: 2ba31003d0e11e01d418efc2bfee2cdfa89393ec (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
From 1ab2ca67db9205f484ebce022be9c9a42bacc802 Mon Sep 17 00:00:00 2001
From: Wenzong Fan <wenzong.fan@windriver.com>
Date: Thu, 23 Feb 2017 08:18:36 +0000
Subject: [PATCH] policy/modules/system/sysnetwork: make dhcpc_t domain MLS
trusted for reading from files up to its clearance
Allow dhcpc_t to search /run/systemd/journal
Fixes:
avc: denied { search } for pid=218 comm="dhclient" name="journal"
dev="tmpfs" ino=10990 scontext=system_u:system_r:dhcpc_t:s0-s15:c0.c1023
tcontext=system_u:object_r:syslogd_runtime_t:s15:c0.c1023 tclass=dir
permissive=0
Upstream-Status: Inappropriate [embedded specific]
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
---
policy/modules/system/sysnetwork.te | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/sysnetwork.te b/policy/modules/system/sysnetwork.te
index a9297f976..b6fd3f907 100644
--- a/policy/modules/system/sysnetwork.te
+++ b/policy/modules/system/sysnetwork.te
@@ -170,6 +170,8 @@ sysnet_run_ifconfig(dhcpc_t, dhcpc_roles)
userdom_use_user_terminals(dhcpc_t)
userdom_dontaudit_search_user_home_dirs(dhcpc_t)
+mls_file_read_to_clearance(dhcpc_t)
+
ifdef(`distro_redhat', `
files_exec_etc_files(dhcpc_t)
')
--
2.17.1
|
