Skip to content

Instantly share code, notes, and snippets.

@tscholak
Last active August 21, 2016 01:23
Show Gist options
  • Save tscholak/d17b5523a808e540729135e75c3aa17c to your computer and use it in GitHub Desktop.
Save tscholak/d17b5523a808e540729135e75c3aa17c to your computer and use it in GitHub Desktop.
cat >local-fix-resolved-bz1353536.te <<'EOF'
module local-fix-resolved-bz1353536 1.0;
require {
type systemd_resolved_t;
type system_dbusd_t;
type chronyd_t;
type unconfined_t;
class dbus { acquire_svc send_msg };
}
#============= systemd_resolved_t ==============
allow systemd_resolved_t system_dbusd_t:dbus acquire_svc;
allow chronyd_t systemd_resolved_t:dbus send_msg;
allow systemd_resolved_t chronyd_t:dbus send_msg;
allow systemd_resolved_t unconfined_t:dbus send_msg;
EOF
checkmodule -M -m -o local-fix-resolved-bz1353536.mod local-fix-resolved-bz1353536.te
semodule_package -o local-fix-resolved-bz1353536.pp -m local-fix-resolved-bz1353536.mod
semodule -i local-fix-resolved-bz1353536.pp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment