55 lines
1.7 KiB
Diff
55 lines
1.7 KiB
Diff
|
From d4a034518393bd1c0277a4dd3e87c8e94b394317 Mon Sep 17 00:00:00 2001
|
||
|
|
From: Zdenek Pytela <zpytela@redhat.com>
|
||
|
|
Date: Tue, 11 Aug 2020 12:47:42 +0200
|
||
|
|
Subject: [PATCH] Allow systemd-machined create userdbd runtime sock files
|
||
|
|
|
||
|
|
Create the systemd_create_userdbd_runtime_sock_files() interface.
|
||
|
|
|
||
|
|
Resolves: rhbz#1862686
|
||
|
|
---
|
||
|
|
policy/modules/system/systemd.if | 18 ++++++++++++++++++
|
||
|
|
policy/modules/system/systemd.te | 1 +
|
||
|
|
2 files changed, 19 insertions(+)
|
||
|
|
|
||
|
|
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
|
||
|
|
index c9d2ed7..a6d8bd0 100644
|
||
|
|
--- a/policy/modules/system/systemd.if
|
||
|
|
+++ b/policy/modules/system/systemd.if
|
||
|
|
@@ -2374,3 +2374,21 @@ interface(`systemd_userdbd_stream_connect',`
|
||
|
|
|
||
|
|
allow $1 systemd_userdbd_t:unix_stream_socket connectto;
|
||
|
|
')
|
||
|
|
+
|
||
|
|
+#######################################
|
||
|
|
+## <summary>
|
||
|
|
+## Create a named socket in userdbd runtime directory
|
||
|
|
+## </summary>
|
||
|
|
+## <param name="domain">
|
||
|
|
+## <summary>
|
||
|
|
+## Domain allowed access.
|
||
|
|
+## </summary>
|
||
|
|
+## </param>
|
||
|
|
+#
|
||
|
|
+interface(`systemd_create_userdbd_runtime_sock_files',`
|
||
|
|
+ gen_require(`
|
||
|
|
+ type systemd_userdbd_runtime_t;
|
||
|
|
+ ')
|
||
|
|
+
|
||
|
|
+ create_sock_files_pattern($1, systemd_userdbd_runtime_t, systemd_userdbd_runtime_t)
|
||
|
|
+')
|
||
|
|
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
|
||
|
|
index 367758a..806b7d6 100644
|
||
|
|
--- a/policy/modules/system/systemd.te
|
||
|
|
+++ b/policy/modules/system/systemd.te
|
||
|
|
@@ -415,6 +415,7 @@ init_manage_config_transient_files(systemd_machined_t)
|
||
|
|
logging_dgram_send(systemd_machined_t)
|
||
|
|
|
||
|
|
systemd_read_efivarfs(systemd_machined_t)
|
||
|
|
+systemd_create_userdbd_runtime_sock_files(systemd_machined_t)
|
||
|
|
|
||
|
|
userdom_dbus_send_all_users(systemd_machined_t)
|
||
|
|
|
||
|
|
--
|
||
|
|
1.8.3.1
|
||
|
|
|