selinux-policy/allow-systemd-hostnamed-and-logind-read-policy.patch
2020-09-22 21:14:15 +08:00

35 lines
1.0 KiB
Diff

From 8b2179cbe385e4b67ab159ac7eee159a664888e3 Mon Sep 17 00:00:00 2001
From: HuaxinLuGitee <1539327763@qq.com>
Date: Tue, 22 Sep 2020 20:44:36 +0800
Subject: [PATCH] commit 2
---
policy/modules/system/systemd.te | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 7cb36c4..a98d366 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -331,6 +331,8 @@ userdom_manage_user_tmp_chr_files(systemd_logind_t)
xserver_dbus_chat(systemd_logind_t)
+allow systemd_logind_t security_t:file mmap_read_file_perms;
+
optional_policy(`
apache_read_tmp_files(systemd_logind_t)
')
@@ -818,6 +820,8 @@ systemd_read_efivarfs(systemd_hostnamed_t)
userdom_read_all_users_state(systemd_hostnamed_t)
userdom_dbus_send_all_users(systemd_hostnamed_t)
+allow systemd_hostnamed_t security_t:file mmap_read_file_perms;
+
optional_policy(`
dbus_system_bus_client(systemd_hostnamed_t)
dbus_connect_system_bus(systemd_hostnamed_t)
--
1.8.3.1