From 25d2a5c01c34d72c20f5d219227ad87897411967 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Wed, 14 Oct 2020 22:41:52 +0200 Reference: https://github.com/fedora-selinux/selinux-policy/commit/25d2a5c01c34d72c20f5d219227ad87897411967 Conflict: NA Subject: [PATCH] Create chronyd_pid_filetrans() interface --- policy/modules/contrib/chronyd.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/policy/modules/contrib/chronyd.if b/policy/modules/contrib/chronyd.if index c1b1b71..3d47264 100644 --- a/policy/modules/contrib/chronyd.if +++ b/policy/modules/contrib/chronyd.if @@ -236,6 +236,25 @@ interface(`chronyd_manage_pid',` manage_dirs_pattern($1, chronyd_var_run_t, chronyd_var_run_t) ') +###################################### +## +## Create objects in /var/run +## with chronyd runtime private file type. +## +## +## +## Domain allowed access. +## +## +# +interface(`chronyd_pid_filetrans',` + gen_require(` + type chronyd_var_run_t; + ') + + files_pid_filetrans($1, chronyd_var_run_t, dir, "chrony-dhcp") +') + #################################### ## ## All of the rules required to -- 1.8.3.1