etc: Add more SELinux permissions for the daemon.
This is needed for some package test suites. * etc/guix-daemon.cil.in (guix_daemon): Permit unix_dgram_socket operations.
This commit is contained in:
		
							parent
							
								
									cbcd520e1a
								
							
						
					
					
						commit
						d64e0261d0
					
				
					 1 changed files with 3 additions and 0 deletions
				
			
		| 
						 | 
					@ -372,6 +372,9 @@
 | 
				
			||||||
  (allow guix_daemon_t
 | 
					  (allow guix_daemon_t
 | 
				
			||||||
         self
 | 
					         self
 | 
				
			||||||
         (unix_stream_socket (connectto)))
 | 
					         (unix_stream_socket (connectto)))
 | 
				
			||||||
 | 
					  (allow guix_daemon_t
 | 
				
			||||||
 | 
					         self
 | 
				
			||||||
 | 
					         (unix_dgram_socket (create bind connect sendto read write)))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  (allow guix_daemon_t
 | 
					  (allow guix_daemon_t
 | 
				
			||||||
         node_t
 | 
					         node_t
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Reference in a new issue