[refpolicy] [PATCH 5/5] Allow sysadm_t to call dracut and transition to dracut_t
Sven Vermeulen
sven.vermeulen at siphos.be
Wed Jan 4 14:03:52 CST 2012
Signed-off-by: Sven Vermeulen <sven.vermeulen at siphos.be>
---
policy/modules/roles/sysadm.te | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
index 64e45ad..9d8872d 100644
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@@ -148,6 +148,10 @@ optional_policy(`
')
optional_policy(`
+ dracut_run(sysadm_t, sysadm_r)
+')
+
+optional_policy(`
firstboot_run(sysadm_t, sysadm_r)
')
--
1.7.3.4
More information about the refpolicy
mailing list