diff options
| author |   Kenton Groombridge <concord@gentoo.org> | 2024-01-12 20:52:19 -0500 |
|---|---|---|
| committer | Kenton Groombridge <concord@gentoo.org> | 2024-03-01 12:04:53 -0500 |
| commit | 9c71ae66a483abd5c00f05496805c37d1117fedb (patch) | |
| tree | 717576dfe074b584aa9e6a338afe7b4ad3ec81f7 | |
| parent | dbus: allow the system bus to get the status of generic units (diff) | |
| download | hardened-refpolicy-9c71ae66a483abd5c00f05496805c37d1117fedb.tar.gz hardened-refpolicy-9c71ae66a483abd5c00f05496805c37d1117fedb.tar.bz2 hardened-refpolicy-9c71ae66a483abd5c00f05496805c37d1117fedb.zip | |
systemd: allow systemd generator to list exports
This is needed now that /etc/exports.d is labeled appropriately.
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
| -rw-r--r-- | policy/modules/system/systemd.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 4bce8fbb..f2399d0a 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -589,6 +589,7 @@ optional_policy(` optional_policy(` fs_search_nfsd_fs(systemd_generator_t) fs_rw_nfsd_fs(systemd_generator_t) + rpc_list_exports(systemd_generator_t) rpc_read_exports(systemd_generator_t) ') |