aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSven Vermeulen <sven.vermeulen@siphos.be>2015-03-03 16:18:48 +0100
committerSven Vermeulen <sven.vermeulen@siphos.be>2015-03-03 16:18:48 +0100
commit9c0dcd8c971259c2af31fb6fdc133388aa478a29 (patch)
tree2028e9d76be37dae9f48267bcf8f13e253400cbf
parentMerge upstream (diff)
downloadhardened-refpolicy-9c0dcd8c971259c2af31fb6fdc133388aa478a29.tar.gz
hardened-refpolicy-9c0dcd8c971259c2af31fb6fdc133388aa478a29.tar.bz2
hardened-refpolicy-9c0dcd8c971259c2af31fb6fdc133388aa478a29.zip
Fix bug #541990 - Grant setfscreate to semanage_migrate_store [semanage_t]
-rw-r--r--policy/modules/system/selinuxutil.te8
1 files changed, 8 insertions, 0 deletions
diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te
index b0d14cb5..9b70f53a 100644
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@@ -667,4 +667,12 @@ ifdef(`distro_gentoo',`
# Moved out of files_relabel_non_auth_files as it cannot be used in tunable_policy otherwise
seutil_relabelto_bin_policy(restorecond_t)
+
+ ##########################################
+ #
+ # semanage local policy
+ #
+
+ # Fix bug #541990 - Grant setfscreate privilege to allow semanage_migrate_store to work properly
+ allow semanage_t self:process { setfscreate };
')