selinux-policy/backport-Allow-aide-to-connect-to-systemd_machined-with-a-unix-socket.patch

23 lines
667 B
Diff

From 63ba7c49db91e64e2a37c4d4c58959dd2d9c1c89 Mon Sep 17 00:00:00 2001
From: Nikola Knazekova <nknazeko@redhat.com>
Date: Mon, 10 Oct 2022 11:45:30 +0200
Subject: [PATCH] Allow aide to connect to systemd_machined with a unix socket.
Resolves: bz#2062936
---
policy/modules/contrib/aide.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/contrib/aide.te b/policy/modules/contrib/aide.te
index 05ae4ad2ed..670aa96f8b 100644
--- a/policy/modules/contrib/aide.te
+++ b/policy/modules/contrib/aide.te
@@ -64,6 +64,7 @@ optional_policy(`
')
optional_policy(`
+ systemd_machined_stream_connect(aide_t)
systemd_userdbd_stream_connect(aide_t)
')