diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te index 7a98123..9d91782 100644 --- a/refpolicy/policy/modules/system/init.te +++ b/refpolicy/policy/modules/system/init.te @@ -31,9 +31,6 @@ allow init_t init_var_run_t:file { create getattr read append write setattr unli allow init_t initrc_t:process transition; allow init_t initrc_exec_t:file { getattr read execute }; -# Create unix sockets -allow init_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown }; -allow init_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown }; allow init_t self:fifo_file { read write ioctl }; kernel_transition_from(init_t,init_exec_t) @@ -68,6 +65,8 @@ corecommands_chroot(init_t) corecommands_execute_general_programs(init_t) corecommands_execute_system_programs(init_t) +logging_send_system_log_message(init_t) + selinux_read_config(init_t) miscfiles_read_localization(init_t) @@ -243,6 +242,8 @@ files_manage_pseudorandom_saved_seed(initrc_t) corecommands_execute_general_programs(initrc_t) corecommands_execute_system_programs(initrc_t) +logging_send_system_log_message(initrc_t) + selinux_read_config(initrc_t) selinux_read_default_contexts(run_init_t)