6e714e474b
- Label all fifo_file as fapolicyd_var_run_t in /var/run. - Allow fapolicyd_t domain to create fifo files labeled as fapolicyd_var_run_t
26 lines
1.1 KiB
Diff
26 lines
1.1 KiB
Diff
From 93d7fc7decfdca3a0622ecc5e0ae3fe5880a836a Mon Sep 17 00:00:00 2001
|
|
From: Lukas Vrabec <lvrabec@redhat.com>
|
|
Date: Tue, 4 Feb 2020 09:33:01 +0100
|
|
Subject: [PATCH] Allow fapolicyd create fifo files with own label
|
|
|
|
- Label all fifo_file as fapolicyd_var_run_t in /var/run.
|
|
- Allow fapolicyd_t domain to create fifo files labeled as
|
|
fapolicyd_var_run_t
|
|
---
|
|
fapolicyd.te | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/fapolicyd.te b/fapolicyd.te
|
|
index 39f09f5..71eb6c0 100644
|
|
--- a/fapolicyd-selinux-0.2/fapolicyd.te
|
|
+++ b/fapolicyd-selinux-0.2/fapolicyd.te
|
|
@@ -48,7 +48,7 @@ manage_dirs_pattern(fapolicyd_t, fapolicyd_var_run_t, fapolicyd_var_run_t)
|
|
manage_files_pattern(fapolicyd_t, fapolicyd_var_run_t, fapolicyd_var_run_t)
|
|
manage_fifo_files_pattern(fapolicyd_t, fapolicyd_var_run_t,fapolicyd_var_run_t)
|
|
manage_lnk_files_pattern(fapolicyd_t, fapolicyd_var_run_t, fapolicyd_var_run_t)
|
|
-files_pid_filetrans(fapolicyd_t, fapolicyd_var_run_t, { dir file lnk_file })
|
|
+files_pid_filetrans(fapolicyd_t, fapolicyd_var_run_t, { dir file fifo_file lnk_file })
|
|
|
|
kernel_dgram_send(fapolicyd_t)
|
|
|