selinux-policy/backport-Allow-smbd_t-process-noatsecure-permission-for-winbi.patch
2023-08-24 11:33:18 +08:00

23 lines
847 B
Diff

From 3d3ff36126d0fd7a38519ede5ad076303105b891 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Thu, 25 Aug 2022 17:33:20 +0200
Subject: [PATCH] Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
---
policy/modules/contrib/samba.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/samba.te b/policy/modules/contrib/samba.te
index 323e38b4cc..d25bc64f5d 100644
--- a/policy/modules/contrib/samba.te
+++ b/policy/modules/contrib/samba.te
@@ -1249,6 +1249,7 @@ optional_policy(`
')
# inter-process communication with other samba domains
+allow smbd_t winbind_rpcd_t:process noatsecure;
allow smbd_t winbind_rpcd_t:unix_stream_socket connectto;
allow winbind_t winbind_rpcd_t:unix_stream_socket connectto;
allow winbind_rpcd_t nmbd_t:unix_dgram_socket sendto;