selinux-policy/allow-ipmievd-to-read-the-process-state-proc-pid-of-.patch

27 lines
783 B
Diff
Raw Normal View History

2020-06-04 20:48:55 +08:00
From d366d95268da066ab3e1655593010856ecead2d6 Mon Sep 17 00:00:00 2001
From: guoxiaoqi <guoxiaoqi2@huawei.com>
Date: Thu, 4 Jun 2020 20:22:30 +0800
Subject: [PATCH] allow ipmievd to read the process state (/proc/pid) of init
Signed-off-by: guoxiaoqi <guoxiaoqi2@huawei.com>
---
policy/modules/contrib/ipmievd.te | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/contrib/ipmievd.te b/policy/modules/contrib/ipmievd.te
index d36f842..2c727c3 100644
--- a/policy/modules/contrib/ipmievd.te
+++ b/policy/modules/contrib/ipmievd.te
@@ -46,6 +46,8 @@ dev_read_sysfs(ipmievd_t)
files_read_kernel_modules(ipmievd_t)
files_map_kernel_modules(ipmievd_t)
+init_read_state(ipmievd_t)
+
logging_send_syslog_msg(ipmievd_t)
miscfiles_read_certs(ipmievd_t)
--
1.8.3.1