etc: Add more SELinux permissions for the daemon.

This is needed for some package test suites. * etc/guix-daemon.cil.in (guix_daemon): Permit unix_dgram_socket operations.
2020-11-25 23:07:29 +01:00 · 2020-11-25 23:07:29 +01:00 · d64e0261d0
commit d64e0261d0
parent cbcd520e1a
1 changed files with 3 additions and 0 deletions
--- a/etc/guix-daemon.cil.in
+++ b/etc/guix-daemon.cil.in
@ -372,6 +372,9 @@
  (allow guix_daemon_t
         self
         (unix_stream_socket (connectto)))
+  (allow guix_daemon_t
+         self
+         (unix_dgram_socket (create bind connect sendto read write)))

  (allow guix_daemon_t
         node_t