aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <cpebenito@tresys.com>2015-10-20 14:48:38 -0400
committerJason Zaman <jason@perfinion.com>2015-10-26 11:52:58 +0800
commit5dece5bd67bca8c3df92c74d776119ae9af8ebc2 (patch)
tree4b020acebc70f484d7782ab71aff721fafa92c3b /policy/modules/system/locallogin.te
parentImplement core systemd policy. (diff)
downloadhardened-refpolicy-5dece5bd67bca8c3df92c74d776119ae9af8ebc2.tar.gz
hardened-refpolicy-5dece5bd67bca8c3df92c74d776119ae9af8ebc2.tar.bz2
hardened-refpolicy-5dece5bd67bca8c3df92c74d776119ae9af8ebc2.zip
Add supporting rules for domains tightly-coupled with systemd.
Diffstat (limited to 'policy/modules/system/locallogin.te')
-rw-r--r--policy/modules/system/locallogin.te8
1 files changed, 8 insertions, 0 deletions
diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te
index 5281665f..766614c8 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -135,6 +135,14 @@ userdom_use_unpriv_users_fds(local_login_t)
userdom_sigchld_all_users(local_login_t)
userdom_create_all_users_keys(local_login_t)
+ifdef(`init_systemd',`
+ auth_manage_faillog(local_login_t)
+
+ systemd_dbus_chat_logind(local_login_t)
+ systemd_use_logind_fds(local_login_t)
+ systemd_manage_logind_pid_pipes(local_login_t)
+')
+
ifdef(`distro_ubuntu',`
optional_policy(`
unconfined_domain(local_login_t)