aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKenton Groombridge <me@concord.sh>2021-11-30 11:30:57 -0500
committerJason Zaman <perfinion@gentoo.org>2022-03-30 19:40:53 -0700
commit5c01efb62cfd14b4ccf8cebcab4245bd188d2060 (patch)
tree108a586f8b929455c2992338dd197bb0cb228759
parentsudo: fixes for polyinstantiation (diff)
downloadhardened-refpolicy-5c01efb6.tar.gz
hardened-refpolicy-5c01efb6.tar.bz2
hardened-refpolicy-5c01efb6.zip
locallogin: fix for polyinstantiation
Signed-off-by: Kenton Groombridge <me@concord.sh> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
-rw-r--r--policy/modules/system/locallogin.te4
1 files changed, 4 insertions, 0 deletions
diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te
index 91f21cc2..6d5e948d 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -157,6 +157,10 @@ ifdef(`distro_ubuntu',`
')
')
+tunable_policy(`allow_polyinstantiation',`
+ seutil_domtrans_setfiles(local_login_t)
+')
+
tunable_policy(`console_login',`
# Able to relabel /dev/console to user tty types.
term_relabel_console(local_login_t)