selinux-policy/add-avc-for-systemd-hostnamed-and-systemd-logind.patch
2020-02-26 17:40:12 +08:00

30 lines
990 B
Diff

From 5d8386f073adf1b835461382844738aca74cab74 Mon Sep 17 00:00:00 2001
From: guoxiaoqi <guoxiaoqi2@huawei.com>
Date: Wed, 26 Feb 2020 11:48:12 +0800
Subject: [PATCH] add avc for systemd-hostnamed and systemd-logind
Signed-off-by: guoxiaoqi <guoxiaoqi2@huawei.com>
---
policy/modules/system/systemd.te | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index d6ce679..f2919f0 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1140,5 +1140,11 @@ optional_policy(`
optional_policy(`
gpg_exec(systemd_importd_t)
')
+
+# avc for openEuler
allow init_t systemd_logind_inhibit_var_run_t:dir mounton;
allow init_t systemd_logind_sessions_t:dir mounton;
+allow init_t systemd_logind_var_lib_t:dir { create mounton read };
+allow init_t systemd_logind_var_run_t:dir mounton;
+init_nnp_daemon_domain(systemd_hostnamed_t)
+init_nnp_daemon_domain(systemd_logind_t)
--
1.8.3.1