diff options
| author | Marius Bakke <marius@gnu.org> | 2020-11-25 23:07:29 +0100 |
|---|---|---|
| committer | Marius Bakke <marius@gnu.org> | 2020-11-25 23:24:52 +0100 |
| commit | d64e0261d0007413a795c4cf01f9d06b170da3f5 (patch) | |
| tree | 4e25a79195836f182feedffd6ecaa8f228df2714 /etc/guix-daemon.cil.in | |
| parent | cbcd520e1a71d75513a1c47d046142b2ff33ad56 (diff) | |
| download | guix-d64e0261d0007413a795c4cf01f9d06b170da3f5.tar guix-d64e0261d0007413a795c4cf01f9d06b170da3f5.tar.gz | |
etc: Add more SELinux permissions for the daemon.
This is needed for some package test suites.
* etc/guix-daemon.cil.in (guix_daemon): Permit unix_dgram_socket operations.
Diffstat (limited to 'etc/guix-daemon.cil.in')
| -rw-r--r-- | etc/guix-daemon.cil.in | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/guix-daemon.cil.in b/etc/guix-daemon.cil.in index 91958b7617..0d7945843e 100644 --- a/etc/guix-daemon.cil.in +++ b/etc/guix-daemon.cil.in @@ -372,6 +372,9 @@ (allow guix_daemon_t self (unix_stream_socket (connectto))) + (allow guix_daemon_t + self + (unix_dgram_socket (create bind connect sendto read write))) (allow guix_daemon_t node_t |