Skip to content

Commit afee1fa

Browse files
committed
dbus: Add noatsecure otherwise the socket variable is lost
1 parent 6ff060d commit afee1fa

1 file changed

Lines changed: 5 additions & 2 deletions

File tree

policy/modules/services/dbus.if

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -105,9 +105,9 @@ template(`dbus_role_template',`
105105
domtrans_pattern($3, dbusd_exec_t, $1_dbusd_t)
106106

107107
ps_process_pattern($3, $1_dbusd_t)
108-
allow $3 $1_dbusd_t:process { ptrace signal_perms };
108+
allow $3 $1_dbusd_t:process { ptrace signal_perms noatsecure };
109109

110-
allow $1_dbusd_t $3:process sigkill;
110+
allow $1_dbusd_t $3:process { sigkill noatsecure };
111111
allow $1_dbusd_t session_dbusd_tmp_t:sock_file manage_sock_file_perms;
112112
allow $1_dbusd_t self:unix_stream_socket connectto;
113113

@@ -475,6 +475,7 @@ interface(`dbus_all_session_domain',`
475475
')
476476

477477
domtrans_pattern(session_bus_type, $2, $1)
478+
allow session_bus_type $1:process noatsecure;
478479

479480
dbus_all_session_bus_client($1)
480481
dbus_connect_all_session_bus($1)
@@ -509,6 +510,7 @@ template(`dbus_spec_session_domain',`
509510
')
510511

511512
domtrans_pattern($1_dbusd_t, $3, $2)
513+
allow $1_dbusd_t $2:process noatsecure;
512514

513515
dbus_spec_session_bus_client($1, $2)
514516
dbus_connect_spec_session_bus($1, $2)
@@ -606,6 +608,7 @@ interface(`dbus_system_domain',`
606608
dbus_connect_system_bus($1)
607609

608610
ps_process_pattern(system_dbusd_t, $1)
611+
allow system_dbusd_t $1:process noatsecure;
609612

610613
userdom_read_all_users_state($1)
611614

0 commit comments

Comments
 (0)