aboutsummaryrefslogtreecommitdiff
path: root/policy
diff options
context:
space:
mode:
authorKenton Groombridge <concord@gentoo.org>2024-01-12 15:33:02 -0500
committerKenton Groombridge <concord@gentoo.org>2024-03-01 12:04:42 -0500
commitd088ca91adce1ab91d293bb5ecfad3e4f2b528b0 (patch)
tree838a31b50eca99fcdecb493291f9ad743efdc3a6 /policy
parentkubernetes: fix kubelet accounting (diff)
downloadhardened-refpolicy-d088ca91adce1ab91d293bb5ecfad3e4f2b528b0.tar.gz
hardened-refpolicy-d088ca91adce1ab91d293bb5ecfad3e4f2b528b0.tar.bz2
hardened-refpolicy-d088ca91adce1ab91d293bb5ecfad3e4f2b528b0.zip
systemd: label systemd-pcrlock as systemd-pcrphase
Label the systemd-pcrlock binary as systemd_pcrphase_exec_t. Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'policy')
-rw-r--r--policy/modules/system/systemd.fc1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/system/systemd.fc b/policy/modules/system/systemd.fc
index 4ea34fe22..2cc13b1aa 100644
--- a/policy/modules/system/systemd.fc
+++ b/policy/modules/system/systemd.fc
@@ -42,6 +42,7 @@
/usr/lib/systemd/systemd-networkd -- gen_context(system_u:object_r:systemd_networkd_exec_t,s0)
/usr/lib/systemd/systemd-network-generator -- gen_context(system_u:object_r:systemd_networkd_exec_t,s0)
/usr/lib/systemd/systemd-pcrextend -- gen_context(system_u:object_r:systemd_pcrphase_exec_t,s0)
+/usr/lib/systemd/systemd-pcrlock -- gen_context(system_u:object_r:systemd_pcrphase_exec_t,s0)
/usr/lib/systemd/systemd-pcrphase -- gen_context(system_u:object_r:systemd_pcrphase_exec_t,s0)
/usr/lib/systemd/systemd-pstore -- gen_context(system_u:object_r:systemd_pstore_exec_t,s0)
/usr/lib/systemd/systemd-resolved -- gen_context(system_u:object_r:systemd_resolved_exec_t,s0)