From 32aa3f5509900563632fec1a1536c84da50553ed Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Thu, 1 Apr 2021 17:36:08 +0200 Reference: https://github.com/fedora-selinux/selinux-policy/commit/32aa3f5509900563632fec1a1536c84da50553ed Conflict: NA Subject: [PATCH] Allow dhcpc_t domain transition to chronyc_t This permission is required when dhclient-script executes the chrony.sh script from /etc/dhcp/dhclient.d. Resolves: rhbz#1897388 --- policy/modules/system/sysnetwork.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/sysnetwork.te b/policy/modules/system/sysnetwork.te index fb0a0c8..70eaf92 100644 --- a/policy/modules/system/sysnetwork.te +++ b/policy/modules/system/sysnetwork.te @@ -198,6 +198,7 @@ optional_policy(` chronyd_initrc_domtrans(dhcpc_t) chronyd_systemctl(dhcpc_t) chronyd_domtrans(dhcpc_t) + chronyd_domtrans_chronyc(dhcpc_t) chronyd_read_keys(dhcpc_t) ') -- 1.8.3.1