selinux-policy/backport-Update-chronyd_pid_filetrans-to-allow-create-dirs.patch
2022-09-14 15:35:03 +08:00

32 lines
1.0 KiB
Diff

From d251c0553ecc432f0aa8a6769e76795902b9ebcd Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Tue, 8 Feb 2022 18:33:51 +0100
Subject: [PATCH] Update chronyd_pid_filetrans() to allow create dirs
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/d251c0553ecc432f0aa8a6769e76795902b9ebcd
Conflict: NA
The chronyd_pid_filetrans() interface was updated so that the caller
domain is now allowed to create the /run/chrony-dhcp directory.
Signed-off-by: lujie54 <lujie54@huawei.com>
---
policy/modules/contrib/chronyd.if | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/chronyd.if b/policy/modules/contrib/chronyd.if
index 3d47264..cad4d31 100644
--- a/policy/modules/contrib/chronyd.if
+++ b/policy/modules/contrib/chronyd.if
@@ -252,6 +252,7 @@ interface(`chronyd_pid_filetrans',`
type chronyd_var_run_t;
')
+ create_dirs_pattern($1, chronyd_var_run_t, chronyd_var_run_t)
files_pid_filetrans($1, chronyd_var_run_t, dir, "chrony-dhcp")
')
--
1.8.3.1