selinux-policy/backport-Allow-winbind-rpcd-get-attributes-of-device-and-pty-.patch
2023-08-24 11:33:18 +08:00

26 lines
754 B
Diff

From 4c7f07ac123d25d9b053fa798067c7ef883fb17b Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Tue, 15 Nov 2022 14:57:01 +0100
Subject: [PATCH] Allow winbind-rpcd get attributes of device and pty
filesystems
Resolves: rhbz#2107106
---
policy/modules/contrib/samba.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/policy/modules/contrib/samba.te b/policy/modules/contrib/samba.te
index 88fb46b700..1395047b3e 100644
--- a/policy/modules/contrib/samba.te
+++ b/policy/modules/contrib/samba.te
@@ -1203,6 +1203,9 @@ corecmd_exec_bin(winbind_rpcd_t)
corenet_tcp_connect_ipp_port(winbind_rpcd_t)
+dev_getattr_fs(winbind_rpcd_t)
+
+term_getattr_pty_fs(winbind_rpcd_t)
term_use_ptmx(winbind_rpcd_t)
optional_policy(`