[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

[Jason Zaman]

commit:     bbd6fcc9c8ff59bcde02b114d6985505e33e8d3f
Author:     Jonathan Davies <jpds <AT> protonmail <DOT> com>
AuthorDate: Fri Mar 25 00:29:42 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Mar 31 02:40:53 2022 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=bbd6fcc9

systemd.if: Allowed reading systemd_userdbd_runtime_t symlinks in 
systemd_stream_connect_userdb().

Signed-off-by: Jonathan Davies <jpds <AT> protonmail.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/system/systemd.if | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index fc000ef9..b1616d21 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -1250,6 +1250,7 @@ interface(`systemd_stream_connect_userdb', `
 
        init_search_runtime($1)
        allow $1 systemd_userdbd_runtime_t:dir list_dir_perms;
+       allow $1 systemd_userdbd_runtime_t:lnk_file read_lnk_file_perms;
        stream_connect_pattern($1, systemd_userdbd_runtime_t, 
systemd_userdbd_runtime_t, systemd_userdbd_t)
        init_unix_stream_socket_connectto($1)
 ')