@@ -105,9 +105,9 @@ template(`dbus_role_template',`
105105 domtrans_pattern($3, dbusd_exec_t, $1_dbusd_t)
106106
107107 ps_process_pattern($3, $1_dbusd_t)
108- allow $3 $1_dbusd_t:process { ptrace signal_perms };
108+ allow $3 $1_dbusd_t:process { ptrace signal_perms noatsecure };
109109
110- allow $1_dbusd_t $3:process sigkill;
110+ allow $1_dbusd_t $3:process { sigkill noatsecure } ;
111111 allow $1_dbusd_t session_dbusd_tmp_t:sock_file manage_sock_file_perms;
112112 allow $1_dbusd_t self:unix_stream_socket connectto;
113113
@@ -475,6 +475,7 @@ interface(`dbus_all_session_domain',`
475475 ')
476476
477477 domtrans_pattern(session_bus_type, $2, $1)
478+ allow session_bus_type $1:process noatsecure;
478479
479480 dbus_all_session_bus_client($1)
480481 dbus_connect_all_session_bus($1)
@@ -509,6 +510,7 @@ template(`dbus_spec_session_domain',`
509510 ')
510511
511512 domtrans_pattern($1_dbusd_t, $3, $2)
513+ allow $1_dbusd_t $2:process noatsecure;
512514
513515 dbus_spec_session_bus_client($1, $2)
514516 dbus_connect_spec_session_bus($1, $2)
@@ -606,6 +608,7 @@ interface(`dbus_system_domain',`
606608 dbus_connect_system_bus($1)
607609
608610 ps_process_pattern(system_dbusd_t, $1)
611+ allow system_dbusd_t $1:process noatsecure;
609612
610613 userdom_read_all_users_state($1)
611614
0 commit comments