commit: 2c5cc83d06d429bfe3b78c0dc7ff6ef3b4858c9d
Author: Laurent Bigonville <bigon <AT> bigon <DOT> be>
AuthorDate: Mon Feb 8 22:52:41 2016 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Fri Feb 12 02:54:52 2016 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=2c5cc83d
Allow firewalld to create firewalld_var_run_t directory.
policy/modules/contrib/firewalld.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/firewalld.te
b/policy/modules/contrib/firewalld.te
index 732558c..7696395 100644
--- a/policy/modules/contrib/firewalld.te
+++ b/policy/modules/contrib/firewalld.te
@@ -48,6 +48,7 @@ manage_files_pattern(firewalld_t, firewalld_tmp_t,
firewalld_tmp_t)
files_tmp_filetrans(firewalld_t, firewalld_tmp_t, file)
allow firewalld_t firewalld_tmp_t:file mmap_file_perms;
+manage_dirs_pattern(firewalld_t, firewalld_var_run_t, firewalld_var_run_t)
manage_files_pattern(firewalld_t, firewalld_var_run_t, firewalld_var_run_t)
files_pid_filetrans(firewalld_t, firewalld_var_run_t, { dir file })
