selinux-policy/allow-systemd_machined_t-delete-userdbd-runtime-sock.patch

26 lines
829 B
Diff
Raw Normal View History

From 99e2285e42bb9d06dbf1322b2990ccee974e1c92 Mon Sep 17 00:00:00 2001
From: HuaxinLuGitee <1539327763@qq.com>
Date: Thu, 17 Sep 2020 14:27:25 +0800
Subject: [PATCH] allow systemd_machined_t delete userdbd runtime sock file
---
policy/modules/system/systemd.te | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 7cb36c4..d0127f6 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -189,6 +189,8 @@ systemd_unit_file(systemd_userdbd_unit_file_t)
type systemd_userdbd_runtime_t;
files_pid_file(systemd_userdbd_runtime_t)
+delete_sock_files_pattern(systemd_machined_t, systemd_userdbd_runtime_t, systemd_userdbd_runtime_t)
+
#######################################
#
# Systemd_logind local policy
--
1.8.3.1