Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Sun, 21 Nov 2021 23:20:29
Message-Id: 1637536477.796eabdd06687050ddd2253588e3d907908e475c.perfinion@gentoo
1 commit: 796eabdd06687050ddd2253588e3d907908e475c
2 Author: Jonathan Davies <jpds <AT> protonmail <DOT> com>
3 AuthorDate: Tue Apr 6 09:50:13 2021 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Sun Nov 21 23:14:37 2021 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=796eabdd
7
8 init.te: Allow init_t access to initrc_state_t dir and fifo.
9
10 Signed-off-by: Jonathan Davies <jpds <AT> protonmail.com>
11 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
12
13 policy/modules/system/init.te | 3 +++
14 1 file changed, 3 insertions(+)
15
16 diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
17 index 3802f575..983d4fbb 100644
18 --- a/policy/modules/system/init.te
19 +++ b/policy/modules/system/init.te
20 @@ -651,6 +651,9 @@ setattr_dirs_pattern(initrc_t, daemonpidfile, daemonpidfile)
21
22 domtrans_pattern(init_run_all_scripts_domain, initrc_exec_t, initrc_t)
23
24 +manage_dirs_pattern(init_t, initrc_state_t, initrc_state_t)
25 +manage_fifo_files_pattern(init_t, initrc_state_t, initrc_state_t)
26 +
27 manage_dirs_pattern(initrc_t, initrc_state_t, initrc_state_t)
28 manage_files_pattern(initrc_t, initrc_state_t, initrc_state_t)
29 manage_lnk_files_pattern(initrc_t, initrc_state_t, initrc_state_t)