650be6afbf
- Label /usr/bin/cockpit-bridge as shell_exec_t. - Add label for /var/run/systemd/resolve/resolv.conf. - ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t. - Allow systemd-networkd to be running as dhcp client. - Label /usr/bin/cockpit-bridge as shell_exec_t. - Add label for /var/run/systemd/resolve/resolv.conf. - ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t.
13 lines
647 B
Diff
13 lines
647 B
Diff
diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
|
|
index 9a8ff3e..593281c 100644
|
|
--- a/policy/modules/kernel/corecommands.fc
|
|
+++ b/policy/modules/kernel/corecommands.fc
|
|
@@ -308,7 +308,6 @@ ifdef(`distro_gentoo',`
|
|
/usr/libexec(/.*)? gen_context(system_u:object_r:bin_t,s0)
|
|
|
|
/usr/libexec/git-core/git-shell -- gen_context(system_u:object_r:shell_exec_t,s0)
|
|
-/usr/libexec/cockpit-agent -- gen_context(system_u:object_r:shell_exec_t,s0)
|
|
/usr/bin/cockpit-bridge -- gen_context(system_u:object_r:shell_exec_t,s0)
|
|
/usr/libexec/sesh -- gen_context(system_u:object_r:shell_exec_t,s0)
|
|
|