diff options
Diffstat (limited to 'policy/modules/system/systemd.if')
| -rw-r--r-- | policy/modules/system/systemd.if | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index 866838fe..b053242a 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -523,6 +523,25 @@ interface(`systemd_rw_networkd_netlink_route_sockets',` allow $1 systemd_networkd_t:netlink_route_socket client_stream_socket_perms; ') +####################################### +## <summary> +## Allow domain to read files generated by systemd_networkd +## </summary> +## <param name="domain"> +## <summary> +## domain allowed access +## </summary> +## </param> +# + +interface(`systemd_read_networkd_runtime',` + gen_require(` + type systemd_networkd_var_run_t; + ') + + list_dirs_pattern($1, systemd_networkd_var_run_t, systemd_networkd_var_run_t) + read_files_pattern($1, systemd_networkd_var_run_t, systemd_networkd_var_run_t) +') ######################################## ## <summary> |