diff options
| author |   Krzysztof Nowicki <krissn@op.pl> | 2020-08-11 14:53:18 +0200 |
|---|---|---|
| committer |   Jason Zaman <perfinion@gentoo.org> | 2021-02-15 11:49:24 -0800 |
| commit | f6088138b8acb7213d368f6acc481c7b417d9cf6 (patch) | |
| tree | 684d05515616317a999ec0ff016fd859193be30d | |
| parent | Allow systemd to relabel startup-important directories (diff) | |
| download | hardened-refpolicy-f6088138.tar.gz hardened-refpolicy-f6088138.tar.bz2 hardened-refpolicy-f6088138.zip | |
Allow execution of shell-scripted systemd generators
While systemd recommends to use native binaries as generators due to
performance reasons, there is nothing that really prevents from them
being shell scripts.
This is Gentoo-specific as the affected generator is provided by
the distribution, not by upstream systemd.
Signed-off-by: Krzysztof Nowicki <krissn@op.pl>
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
| -rw-r--r-- | policy/modules/system/systemd.te | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 8ec415d0b..5d34e6d2e 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -443,6 +443,10 @@ systemd_log_parse_environment(systemd_generator_t) term_use_unallocated_ttys(systemd_generator_t) +ifdef(`distro_gentoo',` + corecmd_shell_entry_type(systemd_generator_t) +') + optional_policy(` fstools_exec(systemd_generator_t) ') |