aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Göttsche <cgzones@googlemail.com>2024-03-28 20:02:47 +0100
committerKenton Groombridge <concord@gentoo.org>2024-05-14 13:40:42 -0400
commitbe9e1fac8b41b5e3a49a9fe064b5911a7ee5e9c9 (patch)
tree9b48e02d820a2ef4cd8c83db15a6d921cbaabe58
parentgetty: grant checkpoint_restore (diff)
downloadhardened-refpolicy-be9e1fac8b41b5e3a49a9fe064b5911a7ee5e9c9.tar.gz
hardened-refpolicy-be9e1fac8b41b5e3a49a9fe064b5911a7ee5e9c9.tar.bz2
hardened-refpolicy-be9e1fac8b41b5e3a49a9fe064b5911a7ee5e9c9.zip
quote: read localization
AVC avc: denied { map } for pid=581 comm="quotaon" path="/usr/lib/locale/locale-archive" dev="vda1" ino=392093 scontext=system_u:system_r:quota_t:s0 tcontext=unconfined_u:object_r:locale_t:s0 tclass=file permissive=0 Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Signed-off-by: Kenton Groombridge <concord@gentoo.org>
-rw-r--r--policy/modules/admin/quota.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/admin/quota.te b/policy/modules/admin/quota.te
index aa6bed829..b3bceaef9 100644
--- a/policy/modules/admin/quota.te
+++ b/policy/modules/admin/quota.te
@@ -72,6 +72,8 @@ fs_getattr_xattr_fs(quota_t)
fs_remount_xattr_fs(quota_t)
fs_search_auto_mountpoints(quota_t)
+miscfiles_read_localization(quota_t)
+
mls_file_read_all_levels(quota_t)
storage_raw_read_fixed_disk(quota_t)