From 5e6b688ea15f842e1d048828a0296c5eea3e26f0 Mon Sep 17 00:00:00 2001 From: Nikola Knazekova Date: Tue, 9 Aug 2022 11:11:34 +0200 Subject: [PATCH] Allow systemd-modules-load write to /dev/kmsg and send a message to syslogd Allow systemd_modules_load_t, early boot service that loads kernel modules, write to the kernel messages device and send a message to syslogd over a unix domain datagram socket. Fix: bz#2088257 --- policy/modules/system/systemd.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 7d490e853c..9440943375 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -1259,9 +1259,12 @@ corecmd_exec_bin(systemd_modules_load_t) corecmd_exec_shell(systemd_modules_load_t) dev_read_sysfs(systemd_modules_load_t) +dev_write_kmsg(systemd_modules_load_t) init_read_pid_files(systemd_modules_load_t) +logging_dgram_send(systemd_modules_load_t) + files_map_kernel_modules(systemd_modules_load_t) files_read_kernel_modules(systemd_modules_load_t)