Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/kernel/
Date: Sun, 05 Sep 2021 16:00:21
Message-Id: 1630852004.c2cd4a6f79b4949857e4a4bd68bef6ea1496a255.perfinion@gentoo
1 commit: c2cd4a6f79b4949857e4a4bd68bef6ea1496a255
2 Author: Markus Linnala <Markus.Linnala <AT> cybercom <DOT> com>
3 AuthorDate: Tue Jun 29 12:32:56 2021 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Sun Sep 5 14:26:44 2021 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c2cd4a6f
7
8 policy: files: files_get_etc_unit_status/files_{start,stop}_etc_service: fix require
9
10 Signed-off-by: Markus Linnala <Markus.Linnala <AT> cybercom.com>
11 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
12
13 policy/modules/kernel/files.if | 3 +++
14 1 file changed, 3 insertions(+)
15
16 diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
17 index 83f8b3f4..f772bfe8 100644
18 --- a/policy/modules/kernel/files.if
19 +++ b/policy/modules/kernel/files.if
20 @@ -3228,6 +3228,7 @@ interface(`files_exec_etc_files',`
21 interface(`files_get_etc_unit_status',`
22 gen_require(`
23 type etc_t;
24 + class service status;
25 ')
26
27 allow $1 etc_t:service status;
28 @@ -3246,6 +3247,7 @@ interface(`files_get_etc_unit_status',`
29 interface(`files_start_etc_service',`
30 gen_require(`
31 type etc_t;
32 + class service start;
33 ')
34
35 allow $1 etc_t:service start;
36 @@ -3264,6 +3266,7 @@ interface(`files_start_etc_service',`
37 interface(`files_stop_etc_service',`
38 gen_require(`
39 type etc_t;
40 + class service stop;
41 ')
42
43 allow $1 etc_t:service stop;