selinux-policy/add-allow-rasdaemon-cap_sys_admin.patch
2021-09-03 20:45:51 +08:00

26 lines
793 B
Diff

From 595e1f9fd4e9b5106487da882cf11d2ffdf79255 Mon Sep 17 00:00:00 2001
From: lujie42 <572084868@qq.com>
Date: Fri, 3 Sep 2021 20:22:18 +0800
Subject: [PATCH] add allow rasdaemon cap_sys_admin
Signed-off-by: lujie42 <572084868@qq.com>
---
policy/modules/contrib/rasdaemon.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/rasdaemon.te b/policy/modules/contrib/rasdaemon.te
index f6891a1..e102e63 100644
--- a/policy/modules/contrib/rasdaemon.te
+++ b/policy/modules/contrib/rasdaemon.te
@@ -19,6 +19,7 @@ systemd_unit_file(rasdaemon_unit_file_t)
#
# rasdaemon local policy
#
+allow rasdaemon_t self:capability sys_admin;
allow rasdaemon_t self:fifo_file rw_fifo_file_perms;
allow rasdaemon_t self:unix_stream_socket create_stream_socket_perms;
--
1.8.3.1