MCorange/wings
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow wings to write to passwd_file_t

Browse Source
This commit is contained in:
Chance Callahan 2022-10-09 08:35:10 -04:00
parent b72ef489ec
commit d7229091a4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
selinux/wings.te
View File

@ -26,7 +26,7 @@ allow wings_t container_var_run_t:sock_file write;
allow wings_t http_cache_port_t:tcp_socket name_bind; allow wings_t http_cache_port_t:tcp_socket name_bind;
allow wings_t http_port_t:tcp_socket name_connect; allow wings_t http_port_t:tcp_socket name_connect;
allow wings_t node_t:tcp_socket node_bind; allow wings_t node_t:tcp_socket node_bind;
allow wings_t passwd_file_t:file { open read }; allow wings_t passwd_file_t:file { write open read };
allow wings_t self:capability { chown dac_override dac_read_search }; allow wings_t self:capability { chown dac_override dac_read_search };
allow wings_t self:netlink_route_socket { bind create getattr nlmsg_read }; allow wings_t self:netlink_route_socket { bind create getattr nlmsg_read };
allow wings_t self:process execmem; allow wings_t self:process execmem;