commit: f1d3bfcfddd12301a24a6c58e60e53f63b782220
Author: Krzysztof Nowicki <krissn <AT> op <DOT> pl>
AuthorDate: Tue Feb 2 22:13:58 2021 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Feb 15 19:49:24 2021 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f1d3bfcf
Allow systemd-tmpfilesd populating of /var/lib/dbus
Signed-off-by: Krzysztof Nowicki <krissn <AT> op.pl>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/modules/services/dbus.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
index 411297ea..0a6c3b72 100644
--- a/policy/modules/services/dbus.te
+++ b/policy/modules/services/dbus.te
@@ -196,6 +196,9 @@ optional_policy(`
# for passing around terminal file handles for machinectl shell
systemd_use_inherited_machined_ptys(system_dbusd_t)
+
+ # allow populating of /var/lib/dbus by systemd-tmpfilesd
+ systemd_tmpfilesd_managed(system_dbusd_var_lib_t, dir)
')
optional_policy(`
