From 4536c1c32c0ed377b1c31aab18819dfb1a46b91e Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Fri, 1 Apr 2022 19:21:10 +0200 Subject: [PATCH] Add the init_append_stream_sockets() interface Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/4536c1c32c0ed377b1c31aab18819dfb1a46b91e Conflict: NA Signed-off-by: lujie54 --- policy/modules/system/init.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index 7bd438e..4b3bb59 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -2789,6 +2789,25 @@ interface(`init_rw_stream_sockets',` allow $1 init_t:unix_stream_socket rw_stream_socket_perms; ') +######################################## +## +## Allow the specified domain to append to +## init unix domain stream sockets. +## +## +## +## Domain allowed access. +## +## +# +interface(`init_append_stream_sockets',` + gen_require(` + type init_t; + ') + + allow $1 init_t:unix_stream_socket append; +') + ####################################### ## ## Allow the specified domain to write to -- 1.8.3.1