Merge pull request #1088 from pebenito/chronyc-urandom

pebenito · web-flow · commit 39dfbfd51754 · 2026-02-17T13:40:36.000-05:00
chronyd: Add urandom access for chronyc UTI_GetRandomBytesUrandom.
diff --git a/policy/modules/services/chronyd.te b/policy/modules/services/chronyd.te
@@ -155,6 +155,9 @@ corenet_udp_sendrecv_generic_node(chronyc_t)
 
 corenet_sendrecv_chronyd_client_packets(chronyc_t)
 
+# UTI_GetRandomBytesUrandom in client.c 
+dev_read_urand(chronyc_t)
+
 files_read_etc_files(chronyc_t)
 files_read_usr_files(chronyc_t)
 
