aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'policy/modules/system/systemd.te')
-rw-r--r--policy/modules/system/systemd.te6
1 files changed, 2 insertions, 4 deletions
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 361b5915..6f05b269 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1274,8 +1274,6 @@ allow systemd_nspawn_t self:udp_socket create_socket_perms;
allow systemd_nspawn_t systemd_journal_t:dir search;
-allow systemd_nspawn_t systemd_machined_t:dbus send_msg;
-
allow systemd_nspawn_t systemd_nspawn_runtime_t:dir manage_dir_perms;
allow systemd_nspawn_t systemd_nspawn_runtime_t:file manage_file_perms;
init_runtime_filetrans(systemd_nspawn_t, systemd_nspawn_runtime_t, dir)
@@ -1401,10 +1399,10 @@ tunable_policy(`systemd_nspawn_labeled_namespace',`
')
optional_policy(`
- allow systemd_machined_t systemd_nspawn_t:dbus send_msg;
-
dbus_system_bus_client(systemd_nspawn_t)
+ systemd_dbus_chat_machined(systemd_nspawn_t)
+
optional_policy(`
unconfined_dbus_send(systemd_machined_t)
')