[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

[Jason Zaman]

commit:     7b9bf7671fd0f56c1761f3a7c0e4e11844cd51d3
Author:     Kenton Groombridge <me <AT> concord <DOT> sh>
AuthorDate: Tue Nov 30 17:11:56 2021 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Mar 31 02:40:53 2022 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=7b9bf767

unconfined: fixes for bluetooth dbus chat and systemd

Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/system/unconfined.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/policy/modules/system/unconfined.te 
b/policy/modules/system/unconfined.te
index df6fbdb7..dacad205 100644
--- a/policy/modules/system/unconfined.te
+++ b/policy/modules/system/unconfined.te
@@ -60,6 +60,7 @@ ifdef(`init_systemd',`
        init_service_status(unconfined_t)
        # for systemd --user:
        init_pgm_spec_user_daemon_domain(unconfined_t)
+       allow unconfined_t self:system { status start stop reload };
 
        optional_policy(`
                systemd_dbus_chat_resolved(unconfined_t)
@@ -76,6 +77,10 @@ optional_policy(`
        bind_run_ndc(unconfined_t, unconfined_r)
 ')
 
+optional_policy(`
+       bluetooth_dbus_chat(unconfined_t)
+')
+
 optional_policy(`
        bootloader_run(unconfined_t, unconfined_r)
 ')