From bf6d97e7f14bdefb7e9e889ae29e29b0d8484a16 Mon Sep 17 00:00:00 2001
From: openEuler Buildteam <buildteam@openeuler.org>
Date: Tue, 15 Dec 2020 14:14:57 +0800
Subject: [PATCH] Fix config file to deny noraml user to stop Setroubleshootd.

---
 org.fedoraproject.Setroubleshootd.conf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/org.fedoraproject.Setroubleshootd.conf b/org.fedoraproject.Setroubleshootd.conf
index 65a0daa..fe0e2f4 100644
--- a/org.fedoraproject.Setroubleshootd.conf
+++ b/org.fedoraproject.Setroubleshootd.conf
@@ -9,12 +9,15 @@
 	</policy>
 	<policy user="root">
 		<allow send_destination="org.fedoraproject.Setroubleshootd"/>
+		<allow send_destination="org.fedoraproject.Setroubleshootd"
+		       send_interface="org.fedoraproject.SetroubleshootdIface"
+		       send_member="finish"/>
 	</policy>
 	<policy context="default">
 		<allow send_destination="org.fedoraproject.Setroubleshootd"
 		       send_interface="org.fedoraproject.SetroubleshootdIface"
 		       send_member="start"/>
-		<allow send_destination="org.fedoraproject.Setroubleshootd"
+		<deny  send_destination="org.fedoraproject.Setroubleshootd"
 		       send_interface="org.fedoraproject.SetroubleshootdIface"
 		       send_member="finish"/>
 		<allow send_destination="org.fedoraproject.Setroubleshootd"
-- 
1.8.3.1