Received-SPF: pass (google.com: best guess record for domain of selinux-refpolicy-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
From:   "Sugar, David" <dsugar@tresys.com>
To:     "selinux-refpolicy@vger.kernel.org" 
        <selinux-refpolicy@vger.kernel.org>
Subject: [PATCH] Add missing gen_require for init_t in init_script_domain
Thread-Topic: [PATCH] Add missing gen_require for init_t in init_script_domain
Thread-Index: AQHVjn44XqQdg4rTpEacsxoDx8CtsQ==
Date:   Tue, 29 Oct 2019 17:28:05 +0000
Message-ID: <20191029172752.1311-1-dsugar@tresys.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-messagesentrepresentingtype: 1
x-mailer: git-send-email 2.21.0
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 45611be5-f50e-4b6f-f953-08d75c955b45
x-ms-traffictypediagnostic: BN6PR15MB1250:
x-microsoft-antispam-prvs: <BN6PR15MB1250C50FB538984BC916002FB9610@BN6PR15MB1250.namprd15.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:346;
x-forefront-prvs: 0205EDCD76
x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(4636009)(396003)(366004)(39830400003)(136003)(376002)(346002)(189003)(199004)(476003)(486006)(86362001)(2616005)(8676002)(81156014)(81166006)(66446008)(64756008)(256004)(186003)(2906002)(26005)(102836004)(71200400001)(50226002)(4744005)(71190400001)(8936002)(6116002)(1076003)(3846002)(2501003)(6506007)(386003)(2351001)(52116002)(36756003)(66066001)(6916009)(14454004)(508600001)(5640700003)(7736002)(6486002)(6436002)(99286004)(316002)(66476007)(25786009)(5660300002)(66946007)(305945005)(6512007)(66556008);DIR:OUT;SFP:1102;SCL:1;SRVR:BN6PR15MB1250;H:BN6PR15MB1507.namprd15.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;MX:1;A:1;
received-spf: None (protection.outlook.com: tresys.com does not designate
 permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: hY9J0tSlXnquOurUctoO/HMuFuYIjPyo2+/w6wnEcR+KEMy6bA6jfqS5aa6KE2RuNUoTBx9IjlYDq8IH8yt6sEpPFufXFDhjutAYucaxLICTg3LbA72Oa/XKiLV1b4bt2ulRSaEhPkyKJoOVmHTaFW7RVpXlbUezk6noU5zx0W/3aodM6u2aKnJJQawjubYAqeBWe4UHY77qufi6ysmwiVSQ0UZqVDZmXFDR0Anta6G4Fn7IInelp5SPIUT4r5wsDNB42PT2zi+JyKcHhcxFDBRIettVnKLjoErA/9pFlYZTM/0VBy4Vqv0bK8izZw/p5PoKJ+Bl0ZkJI8mqyfJ3vybWTmnsBGfEtiqm2yawMKOvf2XMLSxFzgU/7bMn2PjMsakZ+wO1aTU7UcLf8xApOle49rJoaXekclORqYCvFVR7u7WZQ+Oc7QLUMlM5iC4e
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: tresys.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 45611be5-f50e-4b6f-f953-08d75c955b45
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Oct 2019 17:28:05.0468
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: a0d45667-6c07-4e88-868f-4ac9af95c7ed
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ZS4UG/WsXottzoh+6kBoQxTtuwQ+5rEgT+J3fIqwadRsogeP1/d+JjaLFM2s6vhT6lz0ALI5r7kONdxQGKo8gw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR15MB1250
Sender: selinux-refpolicy-owner@vger.kernel.org
Precedence: bulk
List-ID: <selinux-refpolicy.vger.kernel.org>
X-Mailing-List: selinux-refpolicy@vger.kernel.org

Signed-off-by: Dave Sugar <dsugar@tresys.com>
---
 policy/modules/system/init.if | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
index da1b9727..a98180c1 100644
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@@ -101,6 +101,9 @@ interface(`init_script_domain',`
 	domtrans_pattern(init_run_all_scripts_domain, $2, $1)
=20
 	ifdef(`init_systemd',`
+		gen_require(`
+			type init_t;
+		')
 		allow $1 init_t:unix_stream_socket { getattr read write ioctl };
=20
 		allow init_t $1:process2 { nnp_transition nosuid_transition };
--=20
2.21.0