[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

[Jason Zaman]

commit:     f312afbcbc2ca62b7745e95fbe065c1f60ff28f5
Author:     Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Tue Feb  2 19:02:49 2021 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Feb  6 21:15:09 2021 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f312afbc

systemd: Fix lint errors.

Signed-off-by: Chris PeBenito <pebenito <AT> ieee.org>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/system/systemd.if | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index d7d0eb3d..48a63cb3 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -30,7 +30,6 @@ template(`systemd_role_template',`
                attribute systemd_user_session_type, systemd_log_parse_env_type;
                type systemd_user_runtime_t, systemd_user_runtime_notify_t;
                type systemd_run_exec_t, systemd_analyze_exec_t;
-               type systemd_machined_t;
        ')
 
        #################################
@@ -68,7 +67,7 @@ template(`systemd_role_template',`
 
        # Allow using file descriptors for user environment generators
        allow $3 $1_systemd_t:fd use;
-       allow $3 $1_systemd_t:fifo_file rw_inherited_file_perms;
+       allow $3 $1_systemd_t:fifo_file rw_inherited_fifo_file_perms;
 
        # systemctl --user
        stream_connect_pattern($3, systemd_user_runtime_t, 
systemd_user_runtime_t, $1_systemd_t)
@@ -1351,5 +1350,5 @@ interface(`systemd_use_machined_devpts', `
        ')
 
        allow $1 systemd_machined_t:fd use;
-       allow $1 systemd_machined_devpts_t:chr_file { read write };
+       allow $1 systemd_machined_devpts_t:chr_file rw_inherited_term_perms;
 ')