Merge "runas: Grant access to seapp_contexts_file" into oc-dev
This commit is contained in:
commit
f4739f4029
1 changed files with 4 additions and 0 deletions
|
@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context
|
|||
allow runas self:process setcurrent;
|
||||
allow runas non_system_app_set:process dyntransition; # setcon
|
||||
|
||||
# runas/libselinux needs access to seapp_contexts_file to
|
||||
# determine which domain to transition to.
|
||||
allow runas seapp_contexts_file:file r_file_perms;
|
||||
|
||||
###
|
||||
### neverallow rules
|
||||
###
|
||||
|
|
Loading…
Reference in a new issue