[PATCH] Add missing gen_require for init_t in init_script_domain
"Sugar, David" <[email protected]>
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
Signed-off-by: Dave Sugar <[email protected]> --- policy/modules/system/init.if | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index da1b9727..a98180c1 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -101,6 +101,9 @@ interface(`init_script_domain',` domtrans_pattern(init_run_all_scripts_domain, $2, $1) ifdef(`init_systemd',` + gen_require(` + type init_t; + ') allow $1 init_t:unix_stream_socket { getattr read write ioctl }; allow init_t $1:process2 { nnp_transition nosuid_transition }; -- 2.21.0