2019-10-29 19:46:26

by Sugar, David

[permalink] [raw]
Subject: [PATCH] Add missing gen_require for init_t in init_script_domain

Signed-off-by: Dave Sugar <[email protected]>
---
policy/modules/system/init.if | 3 +++
1 file changed, 3 insertions(+)

diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
index da1b9727..a98180c1 100644
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@@ -101,6 +101,9 @@ interface(`init_script_domain',`
domtrans_pattern(init_run_all_scripts_domain, $2, $1)

ifdef(`init_systemd',`
+ gen_require(`
+ type init_t;
+ ')
allow $1 init_t:unix_stream_socket { getattr read write ioctl };

allow init_t $1:process2 { nnp_transition nosuid_transition };
--
2.21.0