[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

[Jason Zaman]

commit:     f5c9fba7feac9bd937bf9de3783b2717fd145f50
Author:     Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Thu Jan 28 16:39:34 2021 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Feb  1 01:21:42 2021 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f5c9fba7

samba: Add missing userspace class requirements in unit interfaces.

Signed-off-by: Chris PeBenito <pebenito <AT> ieee.org>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/services/samba.if | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/policy/modules/services/samba.if b/policy/modules/services/samba.if
index 6af30d0c..92eab06d 100644
--- a/policy/modules/services/samba.if
+++ b/policy/modules/services/samba.if
@@ -341,6 +341,7 @@ interface(`samba_read_share_files',`
 interface(`samba_start',`
        gen_require(`
                type samba_unit_t;
+               class service start;
        ')
 
        allow $1 samba_unit_t:file getattr;
@@ -360,6 +361,7 @@ interface(`samba_start',`
 interface(`samba_stop',`
        gen_require(`
                type samba_unit_t;
+               class service stop;
        ')
 
        allow $1 samba_unit_t:file getattr;
@@ -379,6 +381,7 @@ interface(`samba_stop',`
 interface(`samba_status',`
        gen_require(`
                type samba_unit_t;
+               class service status;
        ')
 
        allow $1 samba_unit_t:file getattr;
@@ -398,6 +401,7 @@ interface(`samba_status',`
 interface(`samba_reload',`
        gen_require(`
                type samba_unit_t;
+               class service reload;
        ')
 
        allow $1 samba_unit_t:file getattr;