Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Thu, 31 Mar 2022 03:31:36
Message-Id: 1648694453.5c01efb62cfd14b4ccf8cebcab4245bd188d2060.perfinion@gentoo
1 commit: 5c01efb62cfd14b4ccf8cebcab4245bd188d2060
2 Author: Kenton Groombridge <me <AT> concord <DOT> sh>
3 AuthorDate: Tue Nov 30 16:30:57 2021 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Thu Mar 31 02:40:53 2022 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5c01efb6
7
8 locallogin: fix for polyinstantiation
9
10 Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
11 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
12
13 policy/modules/system/locallogin.te | 4 ++++
14 1 file changed, 4 insertions(+)
15
16 diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te
17 index 91f21cc2..6d5e948d 100644
18 --- a/policy/modules/system/locallogin.te
19 +++ b/policy/modules/system/locallogin.te
20 @@ -157,6 +157,10 @@ ifdef(`distro_ubuntu',`
21 ')
22 ')
23
24 +tunable_policy(`allow_polyinstantiation',`
25 + seutil_domtrans_setfiles(local_login_t)
26 +')
27 +
28 tunable_policy(`console_login',`
29 # Able to relabel /dev/console to user tty types.
30 term_relabel_console(local_login_t)