1 |
commit: 50ce02c8052e06fca2e8ec5ba6982effdf522d67 |
2 |
Author: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
3 |
AuthorDate: Tue Nov 17 03:46:28 2020 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Nov 28 22:56:14 2020 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=50ce02c8 |
7 |
|
8 |
systemd: make remaining dbus_* optional |
9 |
|
10 |
Almost all calls to dbus_ interfaces were already optional, this makes |
11 |
the remaining one optional_policy so that the modules can be installed / |
12 |
upgraded easier. |
13 |
|
14 |
Signed-off-by: Jason Zaman <jason <AT> perfinion.com> |
15 |
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org> |
16 |
|
17 |
policy/modules/system/systemd.te | 4 +++- |
18 |
1 file changed, 3 insertions(+), 1 deletion(-) |
19 |
|
20 |
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te |
21 |
index 74f3fc55..a08b83d5 100644 |
22 |
--- a/policy/modules/system/systemd.te |
23 |
+++ b/policy/modules/system/systemd.te |
24 |
@@ -1450,4 +1450,6 @@ userdom_manage_user_runtime_dirs(systemd_user_runtime_dir_t) |
25 |
userdom_mounton_user_runtime_dirs(systemd_user_runtime_dir_t) |
26 |
userdom_relabelto_user_runtime_dirs(systemd_user_runtime_dir_t) |
27 |
|
28 |
-dbus_system_bus_client(systemd_user_runtime_dir_t) |
29 |
+optional_policy(` |
30 |
+ dbus_system_bus_client(systemd_user_runtime_dir_t) |
31 |
+') |