mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-07-05 21:57:16 -04:00
Code Issues Packages Projects Releases Wiki Activity

selinux: Let the system helper have read access to /etc/passwd

Browse Source 
The system-helper (ie., the `flatpak-system-helper` process) is
labelled with flatpak_helper_exec_t and runs in the flatpak_helper_t
domain, and needs to be able to read /etc/passwd.  This explicitly
permits it to do so to avoid running into SELinux denials.

https://bugzilla.redhat.com/show_bug.cgi?id=2070350
(cherry picked from commit 002e4455d8)
This commit is contained in:
Debarshi Ray
2022-04-12 20:28:29 +02:00
committed by Simon McVittie
parent 9a6b71b626
commit cdfda66101
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
selinux/flatpak.te
View File

@@ -12,6 +12,8 @@ type flatpak_helper_t;
type flatpak_helper_exec_t;
init_daemon_domain(flatpak_helper_t, flatpak_helper_exec_t)
auth_read_passwd(flatpak_helper_t)
optional_policy(`
dbus_stub()
dbus_system_domain(flatpak_helper_t, flatpak_helper_exec_t)