commit: 621173ccfc704a796406e112f0342aae3f3bd803
Author: Kenton Groombridge <me <AT> concord <DOT> sh>
AuthorDate: Fri Nov 12 22:23:37 2021 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Mar 31 02:40:53 2022 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=621173cc
authlogin: dontaudit getcap chkpwd
Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/modules/system/authlogin.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/authlogin.te
b/policy/modules/system/authlogin.te
index 286bf52e..f4741e3a 100644
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@@ -109,6 +109,7 @@ optional_policy(`
allow chkpwd_t self:capability { dac_override setuid };
dontaudit chkpwd_t self:capability sys_tty_config;
allow chkpwd_t self:process { getattr signal };
+dontaudit chkpwd_t self:process getcap;
allow chkpwd_t shadow_t:file read_file_perms;
files_list_etc(chkpwd_t)
