selinux-policy/allow-systemd-to-mount-unlabeled-filesystemd.patch
2020-07-27 09:57:59 +08:00

26 lines
807 B
Diff

From e9b8e0daa3fb3f3b7079ffb6095d9842ccda4554 Mon Sep 17 00:00:00 2001
From: guoxiaoqi <guoxiaoqi2@huawei.com>
Date: Thu, 16 Jul 2020 19:35:21 +0800
Subject: [PATCH] allow systemd to mount unlabeled filesystemd
Signed-off-by: guoxiaoqi <guoxiaoqi2@huawei.com>
---
policy/modules/system/init.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index b7a4114..d8ca280 100644
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -591,6 +591,7 @@ dev_rw_wireless(init_t)
files_search_all(init_t)
files_mounton_all_mountpoints(init_t)
files_mounton_etc(init_t)
+files_mounton_isid(init_t)
files_unmount_all_file_type_fs(init_t)
files_mounton_kernel_symbol_table(init_t)
files_manage_all_pid_dirs(init_t)
--
1.8.3.1