selinux-policy/backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
2021-05-31 18:58:06 +08:00

29 lines
892 B
Diff

From a3ec0f513ede0204be0e793b9e4f19214e9ce063 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Thu, 10 Dec 2020 00:17:57 +0100
Reference: https://github.com/fedora-selinux/selinux-policy/commit/a3ec0f513ede0204be0e793b9e4f19214e9ce063
Conflict: NA
Subject: [PATCH] Allow nsswitch-domain write to systemd-resolved PID socket
files
Resolves: rhbz#1900143
---
policy/modules/system/authlogin.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/authlogin.te b/policy/modules/system/authlogin.te
index 068caed..576ec5f 100644
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@@ -562,6 +562,7 @@ optional_policy(`
')
optional_policy(`
+ systemd_resolved_write_pid_sock_files(nsswitch_domain)
systemd_userdbd_stream_connect(nsswitch_domain)
systemd_machined_stream_connect(nsswitch_domain)
')
--
1.8.3.1