diff options
author | Chris PeBenito <cpebenito@tresys.com> | 2015-10-20 14:48:38 -0400 |
---|---|---|
committer | Jason Zaman <jason@perfinion.com> | 2015-10-26 11:52:58 +0800 |
commit | 5dece5bd67bca8c3df92c74d776119ae9af8ebc2 (patch) | |
tree | 4b020acebc70f484d7782ab71aff721fafa92c3b /policy/modules/system/locallogin.te | |
parent | Implement core systemd policy. (diff) | |
download | hardened-refpolicy-5dece5bd67bca8c3df92c74d776119ae9af8ebc2.tar.gz hardened-refpolicy-5dece5bd67bca8c3df92c74d776119ae9af8ebc2.tar.bz2 hardened-refpolicy-5dece5bd67bca8c3df92c74d776119ae9af8ebc2.zip |
Add supporting rules for domains tightly-coupled with systemd.
Diffstat (limited to 'policy/modules/system/locallogin.te')
-rw-r--r-- | policy/modules/system/locallogin.te | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te index 5281665f..766614c8 100644 --- a/policy/modules/system/locallogin.te +++ b/policy/modules/system/locallogin.te @@ -135,6 +135,14 @@ userdom_use_unpriv_users_fds(local_login_t) userdom_sigchld_all_users(local_login_t) userdom_create_all_users_keys(local_login_t) +ifdef(`init_systemd',` + auth_manage_faillog(local_login_t) + + systemd_dbus_chat_logind(local_login_t) + systemd_use_logind_fds(local_login_t) + systemd_manage_logind_pid_pipes(local_login_t) +') + ifdef(`distro_ubuntu',` optional_policy(` unconfined_domain(local_login_t) |