sec-policy/selinux-lego: update policy

This commit is contained in:
2021-05-21 10:51:58 +03:00
parent d2b57a24c2
commit b6b230db23
3 changed files with 6 additions and 4 deletions

View File

@@ -30,8 +30,10 @@ ubac_constrained(lego_data_t)
# lego local policy
#
allow lego_t self:capability { dac_override dac_read_search };
allow lego_t self:process getsched;
allow lego_t self:process { getsched signal };
allow lego_t self:fifo_file rw_fifo_file_perms;
sysnet_read_config(lego_t)
files_search_var_lib(lego_t)