33 lines
1007 B
Diff
33 lines
1007 B
Diff
From 51422c4a4277924046514a18b67a38b896d698f0 Mon Sep 17 00:00:00 2001
|
|
From: Zdenek Pytela <zpytela@redhat.com>
|
|
Date: Fri, 28 Jan 2022 17:40:25 +0100
|
|
Subject: [PATCH] Allow ModemManager connect to the unconfined user domain
|
|
|
|
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/51422c4a4277924046514a18b67a38b896d698f0
|
|
Conflict: NA
|
|
|
|
The modemmanager_t domain was allowed to connect to unconfined_t
|
|
over a unix domain stream socket.
|
|
|
|
Resolves: rhbz#1961571
|
|
Signed-off-by: lujie54 <lujie54@huawei.com>
|
|
---
|
|
policy/modules/contrib/modemmanager.te | 4 ++++
|
|
1 file changed, 4 insertions(+)
|
|
|
|
diff --git a/policy/modules/contrib/modemmanager.te b/policy/modules/contrib/modemmanager.te
|
|
index 857ed6b..9a132b2 100644
|
|
--- a/policy/modules/contrib/modemmanager.te
|
|
+++ b/policy/modules/contrib/modemmanager.te
|
|
@@ -82,3 +82,7 @@ optional_policy(`
|
|
udev_read_db(modemmanager_t)
|
|
udev_manage_pid_files(modemmanager_t)
|
|
')
|
|
+
|
|
+optional_policy(`
|
|
+ unconfined_stream_connect(modemmanager_t)
|
|
+')
|
|
--
|
|
1.8.3.1
|
|
|