[PATCH 09/10] Allow systemd_locale_t to talk to systemd notify socket
Laurent Bigonville <[email protected]>
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
From: Laurent Bigonville <[email protected]> ---- time->Sun Oct 6 15:05:29 2019 type=AVC msg=audit(1570367129.524:673): avc: denied { write } for pid=9609 comm="systemd-localed" name="notify" dev="tmpfs" ino=18551 scontext=system_u:system_r:systemd_locale_t:s0 tcontext=system_u:object_r:init_runtime_t:s0 tclass=sock_file permissive=1 Signed-off-by: Laurent Bigonville <[email protected]> --- policy/modules/system/systemd.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 1422d8e2..3eeb8c64 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -395,6 +395,8 @@ kernel_read_kernel_sysctls(systemd_locale_t) files_read_etc_files(systemd_locale_t) +init_write_runtime_socket(systemd_locale_t) + seutil_read_file_contexts(systemd_locale_t) systemd_log_parse_environment(systemd_locale_t) -- 2.23.0