1 |
commit: 5c01efb62cfd14b4ccf8cebcab4245bd188d2060 |
2 |
Author: Kenton Groombridge <me <AT> concord <DOT> sh> |
3 |
AuthorDate: Tue Nov 30 16:30:57 2021 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Mar 31 02:40:53 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5c01efb6 |
7 |
|
8 |
locallogin: fix for polyinstantiation |
9 |
|
10 |
Signed-off-by: Kenton Groombridge <me <AT> concord.sh> |
11 |
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org> |
12 |
|
13 |
policy/modules/system/locallogin.te | 4 ++++ |
14 |
1 file changed, 4 insertions(+) |
15 |
|
16 |
diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te |
17 |
index 91f21cc2..6d5e948d 100644 |
18 |
--- a/policy/modules/system/locallogin.te |
19 |
+++ b/policy/modules/system/locallogin.te |
20 |
@@ -157,6 +157,10 @@ ifdef(`distro_ubuntu',` |
21 |
') |
22 |
') |
23 |
|
24 |
+tunable_policy(`allow_polyinstantiation',` |
25 |
+ seutil_domtrans_setfiles(local_login_t) |
26 |
+') |
27 |
+ |
28 |
tunable_policy(`console_login',` |
29 |
# Able to relabel /dev/console to user tty types. |
30 |
term_relabel_console(local_login_t) |