34 lines
1.3 KiB
Diff
34 lines
1.3 KiB
Diff
From bf6d97e7f14bdefb7e9e889ae29e29b0d8484a16 Mon Sep 17 00:00:00 2001
|
|
From: openEuler Buildteam <buildteam@openeuler.org>
|
|
Date: Tue, 15 Dec 2020 14:14:57 +0800
|
|
Subject: [PATCH] Fix config file to deny noraml user to stop Setroubleshootd.
|
|
|
|
---
|
|
org.fedoraproject.Setroubleshootd.conf | 5 ++++-
|
|
1 file changed, 4 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/org.fedoraproject.Setroubleshootd.conf b/org.fedoraproject.Setroubleshootd.conf
|
|
index 65a0daa..fe0e2f4 100644
|
|
--- a/org.fedoraproject.Setroubleshootd.conf
|
|
+++ b/org.fedoraproject.Setroubleshootd.conf
|
|
@@ -9,12 +9,15 @@
|
|
</policy>
|
|
<policy user="root">
|
|
<allow send_destination="org.fedoraproject.Setroubleshootd"/>
|
|
+ <allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
+ send_interface="org.fedoraproject.SetroubleshootdIface"
|
|
+ send_member="finish"/>
|
|
</policy>
|
|
<policy context="default">
|
|
<allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
send_interface="org.fedoraproject.SetroubleshootdIface"
|
|
send_member="start"/>
|
|
- <allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
+ <deny send_destination="org.fedoraproject.Setroubleshootd"
|
|
send_interface="org.fedoraproject.SetroubleshootdIface"
|
|
send_member="finish"/>
|
|
<allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
--
|
|
1.8.3.1
|
|
|