Skip to content

Commit 4ae980c

Browse files
committed
systemd: locales fixes
``` AVC avc: denied { search } for pid=1117 comm="systemd-sysctl" name="locale" dev="dm-0" ino=1080894036 scontext=system_u:system_r:systemd_sysctl_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir ``` ``` AVC avc: denied { map } for pid=1118 comm="systemd-tmpfile" path="/usr/lib/locale/locale-archive" dev="dm-0" ino=3602686423 scontext=system_u:system_r:systemd_tmpfiles_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file ``` ``` AVC avc: denied { search } for pid=1162 comm="systemd-userwor" name="locale" dev="dm-0" ino=1080894036 scontext=system_u:system_r:systemd_userdbd_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir ``` ``` AVC avc: denied { search } for pid=1165 comm="systemd-nsresou" name="locale" dev="dm-0" ino=1080894036 scontext=system_u:system_r:systemd_nsresourced_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir ``` ``` AVC avc: denied { read } for pid=1424 comm="systemd-binfmt" name="locale-archive" dev="dm-0" ino=3602686423 scontext=system_u:system_r:systemd_binfmt_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file ``` ``` AVC avc: denied { search } for pid=1501 comm="systemd-machine" name="locale" dev="dm-0" ino=1080894036 scontext=system_u:system_r:systemd_machined_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir ``` Signed-off-by: Sam James <sam@gentoo.org>
1 parent 47c70e5 commit 4ae980c

1 file changed

Lines changed: 11 additions & 1 deletion

File tree

policy/modules/system/systemd.te

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -491,6 +491,8 @@ fs_getattr_cgroup(systemd_binfmt_t)
491491
fs_search_cgroup_dirs(systemd_binfmt_t)
492492
fs_getattr_nsfs_files(systemd_binfmt_t)
493493

494+
miscfiles_read_localization(systemd_binfmt_t)
495+
494496
######################################
495497
#
496498
# Cgroups local policy
@@ -1336,6 +1338,8 @@ init_stop_transient_units(systemd_machined_t)
13361338

13371339
logging_send_syslog_msg(systemd_machined_t)
13381340

1341+
miscfiles_read_localization(systemd_machined_t)
1342+
13391343
seutil_search_default_contexts(systemd_machined_t)
13401344

13411345
term_getattr_pty_fs(systemd_machined_t)
@@ -1756,6 +1760,8 @@ kernel_read_kernel_sysctls(systemd_nsresourced_t)
17561760
# for /proc/cmdline
17571761
kernel_read_system_state(systemd_nsresourced_t)
17581762

1763+
miscfiles_read_localization(systemd_nsresourced_t)
1764+
17591765
systemd_log_parse_environment(systemd_nsresourced_t)
17601766

17611767
#######################################
@@ -2075,6 +2081,8 @@ fs_search_ramfs(systemd_sysctl_t)
20752081
fs_search_tmpfs(systemd_sysctl_t)
20762082
fs_getattr_nsfs_files(systemd_sysctl_t)
20772083

2084+
miscfiles_read_localization(systemd_sysctl_t)
2085+
20782086
systemd_log_parse_environment(systemd_sysctl_t)
20792087

20802088
#########################################
@@ -2252,7 +2260,7 @@ logging_setattr_syslogd_tmp_dirs(systemd_tmpfiles_t)
22522260

22532261
miscfiles_manage_man_pages(systemd_tmpfiles_t)
22542262
miscfiles_relabel_man_cache(systemd_tmpfiles_t)
2255-
miscfiles_getattr_localization(systemd_tmpfiles_t)
2263+
miscfiles_read_localization(systemd_tmpfiles_t)
22562264

22572265
seutil_read_config(systemd_tmpfiles_t)
22582266
seutil_read_file_contexts(systemd_tmpfiles_t)
@@ -2443,6 +2451,8 @@ init_read_state(systemd_userdbd_t)
24432451

24442452
kernel_read_kernel_sysctls(systemd_userdbd_t)
24452453

2454+
miscfiles_read_localization(systemd_userdbd_t)
2455+
24462456
seutil_search_default_contexts(systemd_userdbd_t)
24472457

24482458
systemd_connect_machined(systemd_userdbd_t)

0 commit comments

Comments
 (0)