Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Sat, 28 Nov 2020 23:09:37
Message-Id: 1606604174.50ce02c8052e06fca2e8ec5ba6982effdf522d67.perfinion@gentoo
1 commit: 50ce02c8052e06fca2e8ec5ba6982effdf522d67
2 Author: Jason Zaman <perfinion <AT> gentoo <DOT> org>
3 AuthorDate: Tue Nov 17 03:46:28 2020 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Sat Nov 28 22:56:14 2020 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=50ce02c8
7
8 systemd: make remaining dbus_* optional
9
10 Almost all calls to dbus_ interfaces were already optional, this makes
11 the remaining one optional_policy so that the modules can be installed /
12 upgraded easier.
13
14 Signed-off-by: Jason Zaman <jason <AT> perfinion.com>
15 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
16
17 policy/modules/system/systemd.te | 4 +++-
18 1 file changed, 3 insertions(+), 1 deletion(-)
19
20 diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
21 index 74f3fc55..a08b83d5 100644
22 --- a/policy/modules/system/systemd.te
23 +++ b/policy/modules/system/systemd.te
24 @@ -1450,4 +1450,6 @@ userdom_manage_user_runtime_dirs(systemd_user_runtime_dir_t)
25 userdom_mounton_user_runtime_dirs(systemd_user_runtime_dir_t)
26 userdom_relabelto_user_runtime_dirs(systemd_user_runtime_dir_t)
27
28 -dbus_system_bus_client(systemd_user_runtime_dir_t)
29 +optional_policy(`
30 + dbus_system_bus_client(systemd_user_runtime_dir_t)
31 +')